Web-Only Limited Access – Understanding What It Means

  • Home
  • Blog
  • Web-Only Limited Access – Understanding What It Means

As a SharePoint admin, the Web-Only Limited Access permission level is one you may have noticed while going through user permissions in your environment.

It is a form of a certain permission level called “Limited Access”, which allows a user or group to access a specific item in a site or a library without giving the user or group direct access to everything else in the site or library. For the Web-Only Limited Access permission level itself, it allows the user or group access to the web object only.

The Web-Only Limited Access permission level is unique because you cannot directly assign it to a user or group. Suppose a user is granted permissions to a list within a site but has not expressly been given permissions to the site itself. In that case, they will automatically receive Limited Access to the site from SharePoint. This means that the user will only use the site to access the list they have permissions on.

Assigning this permission level is default SharePoint behaviour and cannot be removed unless the user’s permissions are removed from the list in question.

With DeliverPoint, you can generate a report showing all users’ permissions within your sites or libraries. You can also use DeliverPoint to copy, grant, revoke, delete and transfer permissions for your users.

You can download a trial here, learn how to install it here, and enjoy the full features of the product for 30 days.

Screenshot showing part of a DeliverPoint Discover Permissions report. This screenshot shows that the user Lightning Tools has Web-Only Limited Access on the site Subsite 1
Screenshot showing part of a DeliverPoint Discover Permissions report. This screenshot shows that the user Lightning Tools has Web-Only Limited Access on the site Subsite 1
Related Posts
Clear Filters

As organisations embrace Microsoft Copilot and AI, permissions management has become more important than ever. The challenge isn’t that Copilot creates new security risks—it simply shines a brighter light on the permissions, sharing links, and access decisions that already exist within your Microsoft 365 environment. In this first article of our governance series, I explore the roles of Site Owners and SharePoint Administrators, the risks of oversharing, and how tools such as SharePoint Advanced Management, Data Access Governance, Access Reviews, sharing controls, and sensitivity labels can help organisations prepare for the age of AI.

Copilot is about to expose the permissions problems many organisations never realised they had. In this webinar, Brett Lonsdale explores why traditional IT-led governance models are no longer enough, how oversharing and stale content create serious AI risks, and why empowering SharePoint Site Owners is now essential for Copilot readiness and Microsoft 365 governance.

Add Comment