Fabrikam Dental Group
fabrikam.onmicrosoft.com
Guests with full control
1
Can change permissions and delete anything
People given access directly
1
Not through a group, so easy to forget
Open to everyone
1
Everyone or Everyone except external users
Lists and libraries with their own permissions
2
On 2 sites
Sites
7
Not counting OneDrives
Who has access to each site 26SharePoint groups 3Lists and libraries with their own permissions 2Subsites with their own permissions 1Access by person 32
Every permission level on each site, with SharePoint groups opened up into their members. Permissions on single files and folders are in File and folder permissions.
| Who | Type | How | Permission level | Outside the organisation |
|---|---|---|---|---|
| Owners of Finance | Microsoft 365 group owners | Through Finance Owners | Full Control | No |
| Members of Finance | Microsoft 365 group | Through Finance Members | Edit | No |
| accounts@hollis-partners.example high | Guest | Given directly | Full Control | Yes |
| anna.kowalski@fabrikam.example | Person | Through Imaging Archive Owners | Full Control | No |
| jack.lee@fabrikam.example | Person | Through Imaging Archive Owners | Full Control | No |
| anna.kowalski@fabrikam.example | Person | Through Imaging Archive Members | Edit | No |
| jack.lee@fabrikam.example | Person | Through Imaging Archive Members | Edit | No |
| aaron.smith@fabrikam.example | Person | Through Imaging Archive Members | Edit | No |
| george.baker@fabrikam.example | Person | Through Imaging Archive Members | Edit | No |
| Owners of Marketing | Microsoft 365 group owners | Through Marketing Owners | Full Control | No |
| Members of Marketing | Microsoft 365 group | Through Marketing Members | Edit | No |
| ben.okafor@fabrikam.example | Person | Through Old Projects Owners | Full Control | No |
| aaron.smith@fabrikam.example | Person | Through Old Projects Members | Edit | No |
| thomas.allen@fabrikam.example | Person | Through Old Projects Members | Edit | No |
| owen.smith@fabrikam.example | Person | Through Old Projects Members | Edit | No |
| noah.harris@fabrikam.example | Person | Through Old Projects Members | Edit | No |
| Owners of Patient Records | Microsoft 365 group owners | Through Patient Records Owners | Full Control | No |
| Members of Patient Records | Microsoft 365 group | Through Patient Records Members | Edit | No |
| Owners of Practice Management | Microsoft 365 group owners | Through Practice Management Owners | Full Control | No |
| Members of Practice Management | Microsoft 365 group | Through Practice Management Members | Edit | No |
| anna.kowalski@fabrikam.example | Person | Through Staff Intranet Owners | Full Control | No |
| anna.kowalski@fabrikam.example | Person | Through Staff Intranet Members | Edit | No |
| thomas.allen@fabrikam.example | Person | Through Staff Intranet Members | Edit | No |
| george.baker@fabrikam.example | Person | Through Staff Intranet Members | Edit | No |
| arthur.lee@fabrikam.example | Person | Through Staff Intranet Members | Edit | No |
| Everyone except external users low | Everyone | Through Staff Intranet Visitors | Read | No |
Lists and libraries that stopped inheriting their site's permissions, so the site's groups don't say who can open them. Each is worth a look: the reason is often a one-off that was never undone.
| Site | List or library | Type | Items | Who can open it |
|---|---|---|---|---|
| Finance | Payroll | Library | 64 | Finance Owners (Full Control), Zara Edwards (Edit) |
| Patient Records low | Lab referrals | Library | 38 | Patient Records Owners (Full Control), Patient Records Members (Contribute), Lab (Read) |
Subsites that don't inherit their parent site's permissions.
| Site | Subsite | Who can open it |
|---|---|---|
| Staff Intranet | HR | Staff Intranet Owners (Full Control), Zara Edwards (Edit) |
Everyone who can get into at least one site, through any group or directly, with guests and outside accounts first. Microsoft 365 and security groups are opened up where the Groups collection has their members.
| Person | Sites | Highest level | Which sites |
|---|---|---|---|
| accounts@hollis-partners.example high | 1 | Full Control | Finance |
| anna.kowalski@fabrikam.example | 5 | Full Control | Finance, Imaging Archiveand 3 moreMarketing, Patient Records, Staff Intranet |
| aaron.smith@fabrikam.example | 3 | Full Control | Imaging Archive, Old Projects, Patient Records |
| arthur.lee@fabrikam.example | 3 | Edit | Marketing, Patient Records, Staff Intranet |
| thomas.allen@fabrikam.example | 3 | Edit | Old Projects, Practice Management, Staff Intranet |
| aisha.brown@fabrikam.example | 2 | Edit | Patient Records, Practice Management |
| amelia.khan@fabrikam.example | 2 | Edit | Finance, Marketing |
| ben.okafor@fabrikam.example | 2 | Full Control | Marketing, Old Projects |
| george.baker@fabrikam.example | 2 | Edit | Imaging Archive, Staff Intranet |
| lily.khan@fabrikam.example | 2 | Edit | Marketing, Practice Management |
| noah.harris@fabrikam.example | 2 | Edit | Old Projects, Practice Management |
| owen.robinson@fabrikam.example | 2 | Edit | Patient Records, Practice Management |
| ruby.davies@fabrikam.example | 2 | Edit | Finance, Marketing |
| thomas.johnson@fabrikam.example | 2 | Edit | Marketing, Patient Records |
| zara.edwards@fabrikam.example | 2 | Full Control | Marketing, Practice Management |
| arthur.williams@fabrikam.example | 1 | Edit | Practice Management |
| ava.jackson@fabrikam.example | 1 | Edit | Marketing |
| ava.thomas@fabrikam.example | 1 | Edit | Finance |
| chloe.jackson@fabrikam.example | 1 | Edit | Finance |
| ethan.jones@fabrikam.example | 1 | Edit | Patient Records |
| george.williams@fabrikam.example | 1 | Edit | Marketing |
| isla.scott@fabrikam.example | 1 | Edit | Marketing |
| jack.lee@fabrikam.example | 1 | Full Control | Imaging Archive |
| jack.ward@fabrikam.example | 1 | Edit | Finance |
| lily.white@fabrikam.example | 1 | Edit | Patient Records |
| megan.green@fabrikam.example | 1 | Edit | Practice Management |
| megan.king@fabrikam.example | 1 | Edit | Patient Records |
| olivia.taylor@fabrikam.example | 1 | Edit | Finance |
| owen.patel@fabrikam.example | 1 | Edit | Practice Management |
| owen.smith@fabrikam.example | 1 | Edit | Old Projects |
| ruby.clark@fabrikam.example | 1 | Full Control | Finance |
| thomas.robinson@fabrikam.example | 1 | Edit | Practice Management |
Read from SharePoint for 7 sites. Hidden levels such as Limited Access, which SharePoint adds when a single file is shared, are left out.
Data from Site permissions (), Groups and Teams (), Users ().