Harbour ITMenu

Powered by Office Sentry 2.2.0

You're in the demo. Three fictional clients with made-up people. Look around freely: nothing can be changed, and it all resets every night.Get Office Sentry
Clients/Fabrikam Dental Group

Fabrikam Dental Group

fabrikam.onmicrosoft.com

Site permissions

Who holds which permission level on each SharePoint site, through which SharePoint group, and the lists, libraries and subsites with permissions of their own.

All clients
Download PDFXLSX

Every permission level on each site, with SharePoint groups opened up into their members. Permissions on single files and folders are in File and folder permissions.

WhoTypeHowPermission levelOutside the organisation
anna.kowalski@fabrikam.examplePersonThrough Imaging Archive MembersEditNo
jack.lee@fabrikam.examplePersonThrough Imaging Archive MembersEditNo
aaron.smith@fabrikam.examplePersonThrough Imaging Archive MembersEditNo
george.baker@fabrikam.examplePersonThrough Imaging Archive MembersEditNo

Each site's SharePoint groups: its owners, members and visitors groups and any others, what each grants on the site and who is in it. A guest in an owners group has full control of the site.

SiteRole on the sitePermission levelMembersGuestsGroup owner
FinanceOwnersFull Control1NoneFinance Owners
FinanceMembersEdit1NoneFinance Owners
FinanceVisitorsRead0NoneFinance Owners
Imaging ArchiveOwnersFull Control2NoneImaging Archive Owners
Imaging ArchiveMembersEdit4NoneImaging Archive Owners
Imaging ArchiveVisitorsRead0NoneImaging Archive Owners
MarketingOwnersFull Control1NoneMarketing Owners
MarketingMembersEdit1NoneMarketing Owners
MarketingVisitorsRead0NoneMarketing Owners
Old ProjectsOwnersFull Control1NoneOld Projects Owners
Old ProjectsMembersEdit4NoneOld Projects Owners
Old ProjectsVisitorsRead0NoneOld Projects Owners
Patient RecordsOwnersFull Control1NonePatient Records Owners
Patient RecordsMembersEdit1NonePatient Records Owners
Patient RecordsVisitorsRead0NonePatient Records Owners
Practice ManagementOwnersFull Control1NonePractice Management Owners
Practice ManagementMembersEdit1NonePractice Management Owners
Practice ManagementVisitorsRead0NonePractice Management Owners
Staff IntranetOwnersFull Control1NoneStaff Intranet Owners
Staff IntranetMembersEdit4NoneStaff Intranet Owners
Staff IntranetVisitorsRead1NoneStaff Intranet Owners

Lists and libraries with their own permissions 2

CSV

Lists and libraries that stopped inheriting their site's permissions, so the site's groups don't say who can open them. Each is worth a look: the reason is often a one-off that was never undone.

SiteList or libraryTypeItemsWho can open it
FinancePayrollLibrary64Finance Owners (Full Control), Zara Edwards (Edit)
Patient Records lowLab referralsLibrary38Patient Records Owners (Full Control), Patient Records Members (Contribute), Lab (Read)

Subsites with their own permissions 1

Subsites that don't inherit their parent site's permissions.

SiteSubsiteWho can open it
Staff IntranetHRStaff Intranet Owners (Full Control), Zara Edwards (Edit)

Everyone who can get into at least one site, through any group or directly, with guests and outside accounts first. Microsoft 365 and security groups are opened up where the Groups collection has their members.

PersonOutside the organisationSitesHighest levelWhich sites
accounts@hollis-partners.example highYes1Full ControlFinance
anna.kowalski@fabrikam.exampleNo5Full ControlFinance, Imaging Archive
and 3 moreMarketing, Patient Records, Staff Intranet
aaron.smith@fabrikam.exampleNo3Full ControlImaging Archive, Old Projects, Patient Records
arthur.lee@fabrikam.exampleNo3EditMarketing, Patient Records, Staff Intranet
thomas.allen@fabrikam.exampleNo3EditOld Projects, Practice Management, Staff Intranet
aisha.brown@fabrikam.exampleNo2EditPatient Records, Practice Management
amelia.khan@fabrikam.exampleNo2EditFinance, Marketing
ben.okafor@fabrikam.exampleNo2Full ControlMarketing, Old Projects
george.baker@fabrikam.exampleNo2EditImaging Archive, Staff Intranet
lily.khan@fabrikam.exampleNo2EditMarketing, Practice Management
noah.harris@fabrikam.exampleNo2EditOld Projects, Practice Management
owen.robinson@fabrikam.exampleNo2EditPatient Records, Practice Management
ruby.davies@fabrikam.exampleNo2EditFinance, Marketing
thomas.johnson@fabrikam.exampleNo2EditMarketing, Patient Records
zara.edwards@fabrikam.exampleNo2Full ControlMarketing, Practice Management
arthur.williams@fabrikam.exampleNo1EditPractice Management
ava.jackson@fabrikam.exampleNo1EditMarketing
ava.thomas@fabrikam.exampleNo1EditFinance
chloe.jackson@fabrikam.exampleNo1EditFinance
ethan.jones@fabrikam.exampleNo1EditPatient Records
george.williams@fabrikam.exampleNo1EditMarketing
isla.scott@fabrikam.exampleNo1EditMarketing
jack.lee@fabrikam.exampleNo1Full ControlImaging Archive
jack.ward@fabrikam.exampleNo1EditFinance
lily.white@fabrikam.exampleNo1EditPatient Records
megan.green@fabrikam.exampleNo1EditPractice Management
megan.king@fabrikam.exampleNo1EditPatient Records
olivia.taylor@fabrikam.exampleNo1EditFinance
owen.patel@fabrikam.exampleNo1EditPractice Management
owen.smith@fabrikam.exampleNo1EditOld Projects
ruby.clark@fabrikam.exampleNo1Full ControlFinance
thomas.robinson@fabrikam.exampleNo1EditPractice Management

Read from SharePoint for 7 sites. Hidden levels such as Limited Access, which SharePoint adds when a single file is shared, are left out.

Data from Site permissions (), Groups and Teams (), Users ().