What determines whether user gets Connector Owners permission? about enterprise-search-sharepoint-server-connector HOT 6 CLOSED

Yes, if a user has Owners Permission in SharePoint, the same will be reflected in the Enterprise Search i.e. the _allow_permission field will contain the list all the of permissions (sharepoint groups) assigned to that object in SharePoint

from enterprise-search-sharepoint-server-connector.

@praveen-elastic Connector Owner isn’t a group in SharePoint though, or is this the same thing as Site Owner?

I thought maybe the Connector Owners was a workplace search concept

from enterprise-search-sharepoint-server-connector.

Hey @catmanjan, I think I am a bit confused. Let to give you a high-level overview of how permissions are synced.

First step: the connector creates a mapping of SharePoint to Workplace user using a mapping csv present in the directory which specifies what's the name of the SharePoint user in Workplace Search. If a mapping csv is not present, it takes the name of SharePoint user to be same in Workplace Search.

Second Step: The connector fetches all the user_ids from SharePoint and maps them to the Workplace Search user names according to the mapping file. If the mapping for that SharePoint user is absent, the connector takes the name of that user same in Workplace Search.

Final Step: For each user_id we fetch the list of permissions assigned to it in SharePoint and then call add_permission api with this list of permissions and the mapped name in Workplace Search.

Coming to document level permission: These are added at the time of full sync/ incremental sync. Each document will contain _allow_permission that contains a list of permissions added to that object in SharePoint, if enable_document_permission is set to Yes.

Hope this helps. If not can you tell me what is Connector Owners referring to ? Is that the SharePoint User name ?

from enterprise-search-sharepoint-server-connector.

Yeah that was my understanding of the process too - here is a screenshot of the _allow_permissions against a document

I can see the Sharepoint usernames I'm expecting, but they also have these other permissions (circled in red)

Where do these permissions come from, and is it expected that all my users would have Connector Owner and therefore be able to see all the documents?

from enterprise-search-sharepoint-server-connector.

These are default groups created in your SharePoint.
Permissions in SharePoint are assigned to users via groups.
I have attached an image which shows the Permissions assigned to a SharePoint library for a site-collection named: 'Enterprise Search'

from enterprise-search-sharepoint-server-connector.

Ah I see, so it makes sense that all the documents under this site would have this as a required permission, thanks

from enterprise-search-sharepoint-server-connector.