Good practices for permissions management

As we have discovered, SharePoint supplies flexible and granular ways to manage permissions, which can lead to uncontrolled situations and uncertainty about who has access to which areas. Here are a couple of helpful tips to keep in mind with SharePoint permissions:

• When sites are connected to teams, manage permissions using Teams’ permission management. Solve restricted content areas using private or shared channels, depending on the case.
• Use AAD groups for permission management whenever possible. If possible, use Teams-connected Microsoft 365 groups and externalize permissions management to team owners.
• Use default permission levels whenever possible (Full Control, Edit, Read, and so on) by default. Create a new SharePoint group whenever custom permissions are required.
• Avoid breaking permission inheritance. Try to solve permission requirements at the site level. If that is not possible, do so at the document library...