Fabrikam Dental Group
Every permission level on each site, with SharePoint groups opened up into their members. Permissions on single files and folders are in File and folder permissions.
| Who | Type | How | Permission level | Outside the organisation |
|---|---|---|---|---|
| Owners of Finance | Microsoft 365 group owners | Through Finance Owners | Full Control | No |
| Members of Finance | Microsoft 365 group | Through Finance Members | Edit | No |
| accounts@hollis-partners.example high | Guest | Given directly | Full Control | Yes |
| anna.kowalski@fabrikam.example | Person | Through Imaging Archive Owners | Full Control | No |
| jack.lee@fabrikam.example | Person | Through Imaging Archive Owners | Full Control | No |
| anna.kowalski@fabrikam.example | Person | Through Imaging Archive Members | Edit | No |
| jack.lee@fabrikam.example | Person | Through Imaging Archive Members | Edit | No |
| aaron.smith@fabrikam.example | Person | Through Imaging Archive Members | Edit | No |
| george.baker@fabrikam.example | Person | Through Imaging Archive Members | Edit | No |
| Owners of Marketing | Microsoft 365 group owners | Through Marketing Owners | Full Control | No |
| Members of Marketing | Microsoft 365 group | Through Marketing Members | Edit | No |
| ben.okafor@fabrikam.example | Person | Through Old Projects Owners | Full Control | No |
| aaron.smith@fabrikam.example | Person | Through Old Projects Members | Edit | No |
| thomas.allen@fabrikam.example | Person | Through Old Projects Members | Edit | No |
| owen.smith@fabrikam.example | Person | Through Old Projects Members | Edit | No |
| noah.harris@fabrikam.example | Person | Through Old Projects Members | Edit | No |
| Owners of Patient Records | Microsoft 365 group owners | Through Patient Records Owners | Full Control | No |
| Members of Patient Records | Microsoft 365 group | Through Patient Records Members | Edit | No |
| Owners of Practice Management | Microsoft 365 group owners | Through Practice Management Owners | Full Control | No |
| Members of Practice Management | Microsoft 365 group | Through Practice Management Members | Edit | No |
| anna.kowalski@fabrikam.example | Person | Through Staff Intranet Owners | Full Control | No |
| anna.kowalski@fabrikam.example | Person | Through Staff Intranet Members | Edit | No |
| thomas.allen@fabrikam.example | Person | Through Staff Intranet Members | Edit | No |
| george.baker@fabrikam.example | Person | Through Staff Intranet Members | Edit | No |
| arthur.lee@fabrikam.example | Person | Through Staff Intranet Members | Edit | No |
| Everyone except external users low | Everyone | Through Staff Intranet Visitors | Read | No |
Lists and libraries that stopped inheriting their site's permissions, so the site's groups don't say who can open them. Each is worth a look: the reason is often a one-off that was never undone.
| Site | List or library | Type | Items | Who can open it |
|---|---|---|---|---|
| Finance | Payroll | Library | 64 | Finance Owners (Full Control), Zara Edwards (Edit) |
| Patient Records low | Lab referrals | Library | 38 | Patient Records Owners (Full Control), Patient Records Members (Contribute), Lab (Read) |
Subsites that don't inherit their parent site's permissions.
| Site | Subsite | Who can open it |
|---|---|---|
| Staff Intranet | HR | Staff Intranet Owners (Full Control), Zara Edwards (Edit) |
Everyone who can get into at least one site, through any group or directly, with guests and outside accounts first. Microsoft 365 and security groups are opened up where the Groups collection has their members.
| Person | Outside the organisation | Sites | Which sites |
|---|---|---|---|
| anna.kowalski@fabrikam.example | No | 5 | Finance, Imaging Archiveand 3 moreMarketing, Patient Records, Staff Intranet |
| arthur.lee@fabrikam.example | No | 3 | Marketing, Patient Records, Staff Intranet |
| thomas.allen@fabrikam.example | No | 3 | Old Projects, Practice Management, Staff Intranet |
| george.baker@fabrikam.example | No | 2 | Imaging Archive, Staff Intranet |
Read from SharePoint for 7 sites. Hidden levels such as Limited Access, which SharePoint adds when a single file is shared, are left out.
Data from Site permissions (), Groups and Teams (), Users ().