Fabrikam Dental Group
fabrikam.onmicrosoft.com
Guests with full control
1
Can change permissions and delete anything
People given access directly
1
Not through a group, so easy to forget
Open to everyone
1
Everyone or Everyone except external users
Lists and libraries with their own permissions
2
On 2 sites
Sites
7
Not counting OneDrives
Who has access to each site 26SharePoint groups 21Lists and libraries with their own permissions 2Subsites with their own permissions 1Access by person 11
Every permission level on each site, with SharePoint groups opened up into their members. Permissions on single files and folders are in File and folder permissions.
| Who | Type | How | Permission level | Outside the organisation |
|---|---|---|---|---|
| Owners of Finance | Microsoft 365 group owners | Through Finance Owners | Full Control | No |
| Members of Finance | Microsoft 365 group | Through Finance Members | Edit | No |
| accounts@hollis-partners.example high | Guest | Given directly | Full Control | Yes |
| anna.kowalski@fabrikam.example | Person | Through Imaging Archive Owners | Full Control | No |
| jack.lee@fabrikam.example | Person | Through Imaging Archive Owners | Full Control | No |
| anna.kowalski@fabrikam.example | Person | Through Imaging Archive Members | Edit | No |
| jack.lee@fabrikam.example | Person | Through Imaging Archive Members | Edit | No |
| aaron.smith@fabrikam.example | Person | Through Imaging Archive Members | Edit | No |
| george.baker@fabrikam.example | Person | Through Imaging Archive Members | Edit | No |
| Owners of Marketing | Microsoft 365 group owners | Through Marketing Owners | Full Control | No |
| Members of Marketing | Microsoft 365 group | Through Marketing Members | Edit | No |
| ben.okafor@fabrikam.example | Person | Through Old Projects Owners | Full Control | No |
| aaron.smith@fabrikam.example | Person | Through Old Projects Members | Edit | No |
| thomas.allen@fabrikam.example | Person | Through Old Projects Members | Edit | No |
| owen.smith@fabrikam.example | Person | Through Old Projects Members | Edit | No |
| noah.harris@fabrikam.example | Person | Through Old Projects Members | Edit | No |
| Owners of Patient Records | Microsoft 365 group owners | Through Patient Records Owners | Full Control | No |
| Members of Patient Records | Microsoft 365 group | Through Patient Records Members | Edit | No |
| Owners of Practice Management | Microsoft 365 group owners | Through Practice Management Owners | Full Control | No |
| Members of Practice Management | Microsoft 365 group | Through Practice Management Members | Edit | No |
| anna.kowalski@fabrikam.example | Person | Through Staff Intranet Owners | Full Control | No |
| anna.kowalski@fabrikam.example | Person | Through Staff Intranet Members | Edit | No |
| thomas.allen@fabrikam.example | Person | Through Staff Intranet Members | Edit | No |
| george.baker@fabrikam.example | Person | Through Staff Intranet Members | Edit | No |
| arthur.lee@fabrikam.example | Person | Through Staff Intranet Members | Edit | No |
| Everyone except external users low | Everyone | Through Staff Intranet Visitors | Read | No |
Lists and libraries that stopped inheriting their site's permissions, so the site's groups don't say who can open them. Each is worth a look: the reason is often a one-off that was never undone.
| Site | List or library | Type | Items | Who can open it |
|---|---|---|---|---|
| Finance | Payroll | Library | 64 | Finance Owners (Full Control), Zara Edwards (Edit) |
| Patient Records low | Lab referrals | Library | 38 | Patient Records Owners (Full Control), Patient Records Members (Contribute), Lab (Read) |
Subsites that don't inherit their parent site's permissions.
| Site | Subsite | Who can open it |
|---|---|---|
| Staff Intranet | HR | Staff Intranet Owners (Full Control), Zara Edwards (Edit) |
Everyone who can get into at least one site, through any group or directly, with guests and outside accounts first. Microsoft 365 and security groups are opened up where the Groups collection has their members.
| Person | Outside the organisation | Sites | Highest level | Which sites |
|---|---|---|---|---|
| anna.kowalski@fabrikam.example | No | 5 | Full Control | Finance, Imaging Archiveand 3 moreMarketing, Patient Records, Staff Intranet |
| arthur.lee@fabrikam.example | No | 3 | Edit | Marketing, Patient Records, Staff Intranet |
| amelia.khan@fabrikam.example | No | 2 | Edit | Finance, Marketing |
| ben.okafor@fabrikam.example | No | 2 | Full Control | Marketing, Old Projects |
| lily.khan@fabrikam.example | No | 2 | Edit | Marketing, Practice Management |
| ruby.davies@fabrikam.example | No | 2 | Edit | Finance, Marketing |
| thomas.johnson@fabrikam.example | No | 2 | Edit | Marketing, Patient Records |
| zara.edwards@fabrikam.example | No | 2 | Full Control | Marketing, Practice Management |
| ava.jackson@fabrikam.example | No | 1 | Edit | Marketing |
| george.williams@fabrikam.example | No | 1 | Edit | Marketing |
| isla.scott@fabrikam.example | No | 1 | Edit | Marketing |
Read from SharePoint for 7 sites. Hidden levels such as Limited Access, which SharePoint adds when a single file is shared, are left out.
Data from Site permissions (), Groups and Teams (), Users ().