PowerShell for Microsoft SharePoint 2010 Administrators

CHAPTER 19Managing Users and Groups

A common question when implementing SharePoint is how site permissions should be handled. The short answer is that it depends on how the SharePoint site or sites are used. In some cases, the best way is to add Active Directory groups into SharePoint groups. In scenarios where access rights change often, it might be better to add individual user accounts to SharePoint groups directly. Managing these SharePoint groups and their members could quickly turn into a lot of time-consuming tasks. Another situation arises when you have a number of sites that are inheriting permissions from a single parent, but then at some point need to start using their own unique permissions—thus bringing about the requirement to ...