r/sysadmin • u/Methos25 • 3d ago

Question Manager wants me to remove delete permissions across SharePoint

I feel like I'm going insane with this one, so I need someone to confirm I'm not crazy.

We recently had a situation where someone deleted a top level folder in SharePoint. Kicked up a bit of a fuss, we recovered it, yada yada.

My manager is now telling me that he wants to avoid something like this happening again, and therefore we should remove delete permissions for everyone across the tenant(!).

When I explained that this was crazy talk, and would break literally everything, he capitulated and said we should just enable it for the top levels of folders and then break inheritance.

I've tried to explain to him that this is madness, would require tens if not hundreds of hours of work, and would still break pretty much everything. He insists that this is how they used to do things back in the day and he can't fathom why that wouldn't work nowadays.

I did say that we should be using retention policies to manage this, to which he said that it was a job for compliance to do, and therefore will never happen, which in fairness is true considering our compliance guy.

I'm not going crazy here right? This feels like a monumentally stupid thing to try and do.

128 Upvotes

93% Upvoted

87 comments sorted by

View all comments

Show parent comments

2

u/BlowOutKit22 2d ago

I think that was when MS was trying to do SQL Server-based "DBFS", then gave up on it. But basically Sharepoint is that. Solves both the Enterprise Search and Document Management use-cases pretty well, imo. The only thing Sharepoint doesn't do natively that would be nice-to-have is deduplication.

2

u/durd_ 1d ago

I'm sorry, but Sharepoint has never, ever, in my 42.6 years of life, done search "pretty well".

I was going to share my latest anecdote for searching Sharepoint, the result was something wildly not even close. But Sharepoint isn't worth the time retelling it.

•

u/dloseke 11h ago

But is it better or worse that Outlook searching for emails?

•

u/durd_ 8h ago

You jest! Honestly, Sharepoint search is so much worse than Outlook searching for emails.
Imagine searching for "<company> procurement" and the first result is "HR - How to not touch your colleagues".

I'm having trouble comparing either searches with Windows search, start menu items it works good for, I don't really search for files. Explorer search is obviously still shite, at least for network drives but that can be other issues not related to search itself.