How to control access to sites and content

When we add someone to a group in SharePoint Online (SPO), that group has been configured to allow or block specific types of interactions. These granular permissions are set in named permission levels, and that is our next focus.

Permission levels

A person added to the members group can read and write data in lists and libraries. They can edit pages and create new lists, but they can’t add other people to the site. These permissions are set in the Edit permission level, which we see as owners when we add people to our sites. We can view the particulars of the Edit permission level— and others—if we visit the Advanced Permissions Settings page at https://<<tenant name>>.sharepoint.com/sites/<<siteName>>/_layouts/15/user.aspx. This page is still in classic mode but offers some deeper insights into SharePoint permissions.

If we click on the Permission Levels link in the ribbon, we see there...