I have a SharePoint Online 2013 site collection which will 'allow external users who accept sharing invitations and sign in as authenticated users'. How can I ensure that only members of the site Owners group (full control) can extend invitations? As a visitor I was able to extend an invitation and I don't want visitors OR members with read or contribute permissions to be able to share. Thank you

Hi,

According to your description, my understanding is that you want to allow that only members of the site owners group have permission to share invitation.

Please check if the manage permission is added into the permission level:

1.Log in the your site with a user account who has Full control permission on the site.

2. Click Settings->Site settings->Site permissions under Users and Permissions.

3.Click Permission levels on the PERMISSIONS ribbon

4.Click Edit or Read and check if the manage permissions under site permissions is chosen. If that is the case, please cancel it.

Please check if the option Allow members to share the site and individual files and folders.  Allow members to . In the Access Request Settings page is chosen. If that is the case, please cancel it.

Best Regards,

Dean Wang

thank you for the answer!  I'm glad i did not have to change anything (hesitant to do so). The Edit AND Read permission levels both have the 'manage permission' unchecked. 

When I go to the Access Request Settings, i see the same image that is shown in your reply (except it has my sharepoint group group name) -  so now my question is, when you say to cancel it, do you mean i should Uncheck the 'allow members to share the site and individual files and folders'  as well as Uncheck the one indented below it, the 'allow members to invite others to the site members group...' 

Do i have to do this for every site I want to restrict? I really want only site owners to be the only ones to allow invitations for internals and especially externals.

This is more than one question Dean, I'm sorry for the complicated questions... I've searched many sites to find more specifics on exactly what i Need.

Any help is appreciated

Hi NormaTak,

>>when you say to cancel it, do you mean i should Uncheck the 'allow members to share the site and individual files and folders'  as well as Uncheck the one indented below it, the 'allow members to invite others to the site members group...

Yes, you should uncheck the both.

>>Do i have to do this for every site I want to restrict?

Yes.

Best Regards,

Dean Wang

I'm running SP2013 on-prem. On my "Access Requests Settings" screen, all I have is "Allow access requests". I don't have "Allow members to share the site..." or "Allow members to invite others...". Any idea why?