Clients/Fabrikam Dental Group

Fabrikam Dental Group

fabrikam.onmicrosoft.com

Monthly review

Report

Guests with full control

Can change permissions and delete anything

People given access directly

Not through a group, so easy to forget

Open to everyone

Everyone or Everyone except external users

Lists and libraries with their own permissions

On 2 sites

Sites

Not counting OneDrives

Who has access to each site 26 SharePoint groups 3 Lists and libraries with their own permissions 2 Subsites with their own permissions 1 Access by person 33

Every permission level on each site, with SharePoint groups opened up into their members. Permissions on single files and folders are in File and folder permissions.

Who	Type	How	Permission level	Outside the organisation

Owners of Finance	Microsoft 365 group owners	Through Finance Owners	Full Control	No
Members of Finance	Microsoft 365 group	Through Finance Members	Edit	No
accounts@hollis-partners.example high	Guest	Given directly	Full Control	Yes

anna.kowalski@fabrikam.example	Person	Through Imaging Archive Owners	Full Control	No
jack.lee@fabrikam.example	Person	Through Imaging Archive Owners	Full Control	No
anna.kowalski@fabrikam.example	Person	Through Imaging Archive Members	Edit	No
jack.lee@fabrikam.example	Person	Through Imaging Archive Members	Edit	No
aaron.smith@fabrikam.example	Person	Through Imaging Archive Members	Edit	No
george.baker@fabrikam.example	Person	Through Imaging Archive Members	Edit	No

Owners of Marketing	Microsoft 365 group owners	Through Marketing Owners	Full Control	No
Members of Marketing	Microsoft 365 group	Through Marketing Members	Edit	No

ben.okafor@fabrikam.example	Person	Through Old Projects Owners	Full Control	No
aaron.smith@fabrikam.example	Person	Through Old Projects Members	Edit	No
thomas.allen@fabrikam.example	Person	Through Old Projects Members	Edit	No
owen.smith@fabrikam.example	Person	Through Old Projects Members	Edit	No
noah.harris@fabrikam.example	Person	Through Old Projects Members	Edit	No

Owners of Patient Records	Microsoft 365 group owners	Through Patient Records Owners	Full Control	No
Members of Patient Records	Microsoft 365 group	Through Patient Records Members	Edit	No

Owners of Practice Management	Microsoft 365 group owners	Through Practice Management Owners	Full Control	No
Members of Practice Management	Microsoft 365 group	Through Practice Management Members	Edit	No

anna.kowalski@fabrikam.example	Person	Through Staff Intranet Owners	Full Control	No
anna.kowalski@fabrikam.example	Person	Through Staff Intranet Members	Edit	No
thomas.allen@fabrikam.example	Person	Through Staff Intranet Members	Edit	No
george.baker@fabrikam.example	Person	Through Staff Intranet Members	Edit	No
arthur.lee@fabrikam.example	Person	Through Staff Intranet Members	Edit	No
Everyone except external users low	Everyone	Through Staff Intranet Visitors	Read	No

Each site's SharePoint groups: its owners, members and visitors groups and any others, what each grants on the site and who is in it. A guest in an owners group has full control of the site.

Site: Finance Clear filters

Site	Group	Role on the site	Permission level	Members	Guests	Group owner
Finance	Finance Owners	Owners	Full Control	1	None	Finance Owners
Finance	Finance Members	Members	Edit	1	None	Finance Owners
Finance	Finance Visitors	Visitors	Read	0	None	Finance Owners

Lists and libraries that stopped inheriting their site's permissions, so the site's groups don't say who can open them. Each is worth a look: the reason is often a one-off that was never undone.

Site	List or library	Type	Items	Who can open it
Finance	Payroll	Library	64	Finance Owners (Full Control), Zara Edwards (Edit)
Patient Records low	Lab referrals	Library	38	Patient Records Owners (Full Control), Patient Records Members (Contribute), Lab (Read)

Subsites that don't inherit their parent site's permissions.

Site	Subsite	Who can open it
Staff Intranet	HR	Staff Intranet Owners (Full Control), Zara Edwards (Edit)

Everyone who can get into at least one site, through any group or directly, with guests and outside accounts first. Microsoft 365 and security groups are opened up where the Groups collection has their members.

Outside the organisation	Sites	Highest level	Which sites
Yes high	1	Full Control	Finance
No	5	Full Control	Finance, Imaging Archive and 3 more Marketing, Patient Records, Staff Intranet
No	3	Edit	Marketing, Patient Records, Staff Intranet
No	3	Edit	Old Projects, Practice Management, Staff Intranet
No	2	Edit	Imaging Archive, Old Projects
No	2	Edit	Patient Records, Practice Management
No	2	Edit	Finance, Marketing
No	2	Full Control	Marketing, Old Projects
No	2	Edit	Imaging Archive, Staff Intranet
No	2	Edit	Marketing, Practice Management
No	2	Edit	Old Projects, Practice Management
No	2	Edit	Patient Records, Practice Management
No	2	Edit	Finance, Marketing
No	2	Edit	Marketing, Patient Records
No	2	Full Control	Marketing, Practice Management
No	1	Edit	Practice Management
No	1	Edit	Marketing
No	1	Edit	Finance
No	1	Edit	Finance
No	1	Edit	Patient Records
No	1	Edit	Marketing
No	1	Edit	Marketing
No	1	Full Control	Imaging Archive
No	1	Edit	Finance
No	1	Edit	Patient Records
No	1	Edit	Practice Management
No	1	Edit	Patient Records
No	1	Edit	Finance
No	1	Edit	Practice Management
No	1	Edit	Old Projects
No	1	Full Control	Patient Records
No	1	Full Control	Finance
No	1	Edit	Practice Management

Read from SharePoint for 7 sites. Hidden levels such as Limited Access, which SharePoint adds when a single file is shared, are left out.

Data from Site permissions (42 minutes ago), Groups and Teams (42 minutes ago), Users (42 minutes ago).

Site permissions

Who has access to each site 26

SharePoint groups 3 of 21

Lists and libraries with their own permissions 2

Subsites with their own permissions 1

Access by person 33