HI All, I had one permissions requirement recently but was not able to figure out how to do it. I need to give unique permissions to approval group for one subsite, while the top site and other sites should have inheritance. I broke the inheritenace of permissions in the subsite, but still when i add users to approvers group, they are added only to the top site only. Wheareas i should be able to add users to the subsite and also to the top site and the user of the subsite should have no access to the top site and user of the top site should not have access to the subsite. Thanks, Madhusudhan

Ah yes, indeed. The problem here is that your sub site is a pre-existing site that was originally configured to inherit permissions. Then you changed it to use unique permissions. When you break permission inheritance, SharePoint will copy the current permission set and use it for the current site. If you then go and add users to the groups listed for the sub site, the groups will be groups from the parent site which is why you are seeing the users getting added to the parent level as well. In order to fix this... Navigate to the sub site. Click "People and Groups" in the left nav. Click "Site Permissions" in the left nav. Current groups are listed. Under the "New" menu, select "New Group". Create the needed groups. Add users to the needed groups. Remove the old groups from Site Permissions. I trust that answers your question... Thanks C http://www.cjvandyk.com/blog

HI Cornelius, Thanks for the reply. But my requirement is different. I need to use only the approval group. If a user is added to the approval group on the top site then the user should only have access to the top site but not subsite. If the user is added to the subsite then he should have access to the subsite only and not the top site. So if the user is added from the top site approvals group it should be added to the top site itself and not to the subsite. Is it possible ? Thanks, Madhusudhan Suddala.

Hi, If you broke the inheritance of the permission of the sub site, then the permissions for the top site and the sub site are independent. The only relation between them is that the groups are available to both of them but you can set the different permissions for the groups in different sites. For your situation, I think you can create a group for each site (top site, group A; sub site, group B) then at top site, set group A has proper permissions depending on you and set group B has no access to it. And at sub site, set group A has no access to it and set group B has proper permissions depending on you. Hope it is helpful! Seven