Harbour ITMenu

Powered by Office Sentry 2.2.0

You're in the demo. Three fictional clients with made-up people. Look around freely: nothing can be changed, and it all resets every night.Get Office Sentry
Clients/Northwind Traders

Northwind Traders

northwindtraders.onmicrosoft.com

Site permissions

Who holds which permission level on each SharePoint site, through which SharePoint group, and the lists, libraries and subsites with permissions of their own.

All clients
Download PDFXLSX

Every permission level on each site, with SharePoint groups opened up into their members. Permissions on single files and folders are in File and folder permissions.

WhoTypeHowPermission levelOutside the organisation
Owners of ClientsMicrosoft 365 group ownersThrough Clients OwnersFull ControlNo
Members of ClientsMicrosoft 365 groupThrough Clients MembersEditNo
d.mason@mason-legal.example lowGuestGiven directlyReadYes
Owners of FinanceMicrosoft 365 group ownersThrough Finance OwnersFull ControlNo
Members of FinanceMicrosoft 365 groupThrough Finance MembersEditNo
accounts@hollis-partners.example highGuestGiven directlyFull ControlYes
Owners of MarketingMicrosoft 365 group ownersThrough Marketing OwnersFull ControlNo
Members of MarketingMicrosoft 365 groupThrough Marketing MembersEditNo
Owners of OperationsMicrosoft 365 group ownersThrough Operations OwnersFull ControlNo
Members of OperationsMicrosoft 365 groupThrough Operations MembersEditNo
ann.patel@northwindtraders.examplePersonThrough Staff Intranet OwnersFull ControlNo
ann.patel@northwindtraders.examplePersonThrough Staff Intranet MembersEditNo
maya.martin@northwindtraders.examplePersonThrough Staff Intranet MembersEditNo
alfie.roberts@northwindtraders.examplePersonThrough Staff Intranet MembersEditNo
jacob.hughes@northwindtraders.examplePersonThrough Staff Intranet MembersEditNo
Everyone except external users lowEveryoneThrough Staff Intranet VisitorsReadNo

Each site's SharePoint groups: its owners, members and visitors groups and any others, what each grants on the site and who is in it. A guest in an owners group has full control of the site.

SiteGroupRole on the sitePermission levelMembersGuestsGroup owner
ClientsClients OwnersOwnersFull Control1NoneClients Owners
ClientsClients MembersMembersEdit1NoneClients Owners
ClientsClients VisitorsVisitorsRead0NoneClients Owners
FinanceFinance OwnersOwnersFull Control1NoneFinance Owners
FinanceFinance MembersMembersEdit1NoneFinance Owners
FinanceFinance VisitorsVisitorsRead0NoneFinance Owners
MarketingMarketing OwnersOwnersFull Control1NoneMarketing Owners
MarketingMarketing MembersMembersEdit1NoneMarketing Owners
MarketingMarketing VisitorsVisitorsRead0NoneMarketing Owners
OperationsOperations OwnersOwnersFull Control1NoneOperations Owners
OperationsOperations MembersMembersEdit1NoneOperations Owners
OperationsOperations VisitorsVisitorsRead0NoneOperations Owners
Staff IntranetStaff Intranet OwnersOwnersFull Control1NoneStaff Intranet Owners
Staff IntranetStaff Intranet MembersMembersEdit4NoneStaff Intranet Owners
Staff IntranetStaff Intranet VisitorsVisitorsRead1NoneStaff Intranet Owners

Lists and libraries with their own permissions 2

CSV

Lists and libraries that stopped inheriting their site's permissions, so the site's groups don't say who can open them. Each is worth a look: the reason is often a one-off that was never undone.

List or libraryTypeItemsWho can open it
Engagement letters lowLibrary38Clients Owners (Full Control), Clients Members (Contribute), D Mason (Read)
PayrollLibrary64Finance Owners (Full Control), Thomas Clarke (Edit)

Subsites with their own permissions 1

Subsites that don't inherit their parent site's permissions.

SiteSubsiteWho can open it
Staff IntranetHRStaff Intranet Owners (Full Control), Thomas Clarke (Edit)

Access by person 31

Everyone who can get into at least one site, through any group or directly, with guests and outside accounts first. Microsoft 365 and security groups are opened up where the Groups collection has their members.

PersonOutside the organisationSitesHighest levelWhich sites
accounts@hollis-partners.example highYes1Full ControlFinance
d.mason@mason-legal.example lowYes1ReadClients
ann.patel@northwindtraders.exampleNo5Full ControlClients, Finance
and 3 moreMarketing, Operations, Staff Intranet
george.roberts@northwindtraders.exampleNo3EditClients, Finance, Marketing
hannah.robinson@northwindtraders.exampleNo3Full ControlClients, Finance, Operations
leo.wright@northwindtraders.exampleNo3EditFinance, Marketing, Operations
amelia.watson@northwindtraders.exampleNo2EditFinance, Operations
hannah.patel@northwindtraders.exampleNo2EditFinance, Marketing
harry.lee@northwindtraders.exampleNo2EditClients, Finance
jacob.hughes@northwindtraders.exampleNo2EditFinance, Staff Intranet
leo.evans@northwindtraders.exampleNo2EditClients, Finance
leo.morris@northwindtraders.exampleNo2EditFinance, Marketing
olivia.scott@northwindtraders.exampleNo2EditFinance, Operations
owen.taylor@northwindtraders.exampleNo2EditClients, Marketing
ruby.hill@northwindtraders.exampleNo2EditClients, Operations
zara.jackson@northwindtraders.exampleNo2EditMarketing, Operations
alfie.roberts@northwindtraders.exampleNo1EditStaff Intranet
alfie.scott@northwindtraders.exampleNo1EditOperations
arthur.evans@northwindtraders.exampleNo1EditFinance
ella.baker@northwindtraders.exampleNo1EditOperations
ethan.green@northwindtraders.exampleNo1EditMarketing
grace.taylor@northwindtraders.exampleNo1EditMarketing
imogen.edwards@northwindtraders.exampleNo1EditClients
maya.martin@northwindtraders.exampleNo1EditStaff Intranet
megan.lee@northwindtraders.exampleNo1EditMarketing
mia.hughes@northwindtraders.exampleNo1EditOperations
olivia.smith@northwindtraders.exampleNo1Full ControlClients
rhys.clark@northwindtraders.exampleNo1EditOperations
robert.hughes@northwindtraders.exampleNo1Full ControlMarketing
ruby.taylor@northwindtraders.exampleNo1Full ControlFinance
thomas.clarke@northwindtraders.exampleNo1EditMarketing

Read from SharePoint for 5 sites. Hidden levels such as Limited Access, which SharePoint adds when a single file is shared, are left out.

Data from Site permissions (), Groups and Teams (), Users ().