Clients/Fabrikam Dental Group

Fabrikam Dental Group

fabrikam.onmicrosoft.com

Monthly review

Report

Guests with full control

Can change permissions and delete anything

People given access directly

Not through a group, so easy to forget

Open to everyone

Everyone or Everyone except external users

Lists and libraries with their own permissions

On 2 sites

Sites

Not counting OneDrives

Who has access to each site 26 SharePoint groups 3 Lists and libraries with their own permissions 2 Subsites with their own permissions 1 Access by person 33

Every permission level on each site, with SharePoint groups opened up into their members. Permissions on single files and folders are in File and folder permissions.

Who	Type	How	Permission level	Outside the organisation

Owners of Finance	Microsoft 365 group owners	Through Finance Owners	Full Control	No
Members of Finance	Microsoft 365 group	Through Finance Members	Edit	No
accounts@hollis-partners.example high	Guest	Given directly	Full Control	Yes

anna.kowalski@fabrikam.example	Person	Through Imaging Archive Owners	Full Control	No
jack.lee@fabrikam.example	Person	Through Imaging Archive Owners	Full Control	No
anna.kowalski@fabrikam.example	Person	Through Imaging Archive Members	Edit	No
jack.lee@fabrikam.example	Person	Through Imaging Archive Members	Edit	No
aaron.smith@fabrikam.example	Person	Through Imaging Archive Members	Edit	No
george.baker@fabrikam.example	Person	Through Imaging Archive Members	Edit	No

Owners of Marketing	Microsoft 365 group owners	Through Marketing Owners	Full Control	No
Members of Marketing	Microsoft 365 group	Through Marketing Members	Edit	No

ben.okafor@fabrikam.example	Person	Through Old Projects Owners	Full Control	No
aaron.smith@fabrikam.example	Person	Through Old Projects Members	Edit	No
thomas.allen@fabrikam.example	Person	Through Old Projects Members	Edit	No
owen.smith@fabrikam.example	Person	Through Old Projects Members	Edit	No
noah.harris@fabrikam.example	Person	Through Old Projects Members	Edit	No

Owners of Patient Records	Microsoft 365 group owners	Through Patient Records Owners	Full Control	No
Members of Patient Records	Microsoft 365 group	Through Patient Records Members	Edit	No

Owners of Practice Management	Microsoft 365 group owners	Through Practice Management Owners	Full Control	No
Members of Practice Management	Microsoft 365 group	Through Practice Management Members	Edit	No

anna.kowalski@fabrikam.example	Person	Through Staff Intranet Owners	Full Control	No
anna.kowalski@fabrikam.example	Person	Through Staff Intranet Members	Edit	No
thomas.allen@fabrikam.example	Person	Through Staff Intranet Members	Edit	No
george.baker@fabrikam.example	Person	Through Staff Intranet Members	Edit	No
arthur.lee@fabrikam.example	Person	Through Staff Intranet Members	Edit	No
Everyone except external users low	Everyone	Through Staff Intranet Visitors	Read	No

Each site's SharePoint groups: its owners, members and visitors groups and any others, what each grants on the site and who is in it. A guest in an owners group has full control of the site.

Group owner: Patient Records Owners Clear filters

Site	Group	Role on the site	Permission level	Members	Guests	Group owner
Patient Records	Patient Records Owners	Owners	Full Control	1	None	Patient Records Owners
Patient Records	Patient Records Members	Members	Edit	1	None	Patient Records Owners
Patient Records	Patient Records Visitors	Visitors	Read	0	None	Patient Records Owners

Lists and libraries that stopped inheriting their site's permissions, so the site's groups don't say who can open them. Each is worth a look: the reason is often a one-off that was never undone.

Site	List or library	Type	Items	Who can open it
Finance	Payroll	Library	64	Finance Owners (Full Control), Zara Edwards (Edit)
Patient Records low	Lab referrals	Library	38	Patient Records Owners (Full Control), Patient Records Members (Contribute), Lab (Read)

Subsites that don't inherit their parent site's permissions.

Site	Subsite	Who can open it
Staff Intranet	HR	Staff Intranet Owners (Full Control), Zara Edwards (Edit)

Everyone who can get into at least one site, through any group or directly, with guests and outside accounts first. Microsoft 365 and security groups are opened up where the Groups collection has their members.

Person	Outside the organisation	Highest level	Which sites
accounts@hollis-partners.example high	Yes	Full Control	Finance
anna.kowalski@fabrikam.example	No	Full Control	Finance, Imaging Archive and 3 more Marketing, Patient Records, Staff Intranet
arthur.lee@fabrikam.example	No	Edit	Marketing, Patient Records, Staff Intranet
thomas.allen@fabrikam.example	No	Edit	Old Projects, Practice Management, Staff Intranet
aaron.smith@fabrikam.example	No	Edit	Imaging Archive, Old Projects
aisha.brown@fabrikam.example	No	Edit	Patient Records, Practice Management
amelia.khan@fabrikam.example	No	Edit	Finance, Marketing
ben.okafor@fabrikam.example	No	Full Control	Marketing, Old Projects
george.baker@fabrikam.example	No	Edit	Imaging Archive, Staff Intranet
lily.khan@fabrikam.example	No	Edit	Marketing, Practice Management
noah.harris@fabrikam.example	No	Edit	Old Projects, Practice Management
owen.robinson@fabrikam.example	No	Edit	Patient Records, Practice Management
ruby.davies@fabrikam.example	No	Edit	Finance, Marketing
thomas.johnson@fabrikam.example	No	Edit	Marketing, Patient Records
zara.edwards@fabrikam.example	No	Full Control	Marketing, Practice Management
arthur.williams@fabrikam.example	No	Edit	Practice Management
ava.jackson@fabrikam.example	No	Edit	Marketing
ava.thomas@fabrikam.example	No	Edit	Finance
chloe.jackson@fabrikam.example	No	Edit	Finance
ethan.jones@fabrikam.example	No	Edit	Patient Records
george.williams@fabrikam.example	No	Edit	Marketing
isla.scott@fabrikam.example	No	Edit	Marketing
jack.lee@fabrikam.example	No	Full Control	Imaging Archive
jack.ward@fabrikam.example	No	Edit	Finance
lily.white@fabrikam.example	No	Edit	Patient Records
megan.green@fabrikam.example	No	Edit	Practice Management
megan.king@fabrikam.example	No	Edit	Patient Records
olivia.taylor@fabrikam.example	No	Edit	Finance
owen.patel@fabrikam.example	No	Edit	Practice Management
owen.smith@fabrikam.example	No	Edit	Old Projects
rhys.walker@fabrikam.example	No	Full Control	Patient Records
ruby.clark@fabrikam.example	No	Full Control	Finance
thomas.robinson@fabrikam.example	No	Edit	Practice Management

Read from SharePoint for 7 sites. Hidden levels such as Limited Access, which SharePoint adds when a single file is shared, are left out.

Data from Site permissions (1 hour ago), Groups and Teams (1 hour ago), Users (1 hour ago).

Site permissions

Who has access to each site 26

SharePoint groups 3 of 21

Lists and libraries with their own permissions 2

Subsites with their own permissions 1

Access by person 33