Harbour ITMenu

Powered by Office Sentry 2.2.0

You're in the demo. Three fictional clients with made-up people. Look around freely: nothing can be changed, and it all resets every night.Get Office Sentry
Clients/Fabrikam Dental Group

Fabrikam Dental Group

fabrikam.onmicrosoft.com

Site permissions

Who holds which permission level on each SharePoint site, through which SharePoint group, and the lists, libraries and subsites with permissions of their own.

All clients
Download PDFXLSX

Every permission level on each site, with SharePoint groups opened up into their members. Permissions on single files and folders are in File and folder permissions.

WhoTypeHowPermission levelOutside the organisation
Owners of FinanceMicrosoft 365 group ownersThrough Finance OwnersFull ControlNo
Members of FinanceMicrosoft 365 groupThrough Finance MembersEditNo
accounts@hollis-partners.example highGuestGiven directlyFull ControlYes

Each site's SharePoint groups: its owners, members and visitors groups and any others, what each grants on the site and who is in it. A guest in an owners group has full control of the site.

GroupRole on the sitePermission levelMembersGuestsGroup owner
Finance OwnersOwnersFull Control1NoneFinance Owners
Finance MembersMembersEdit1NoneFinance Owners
Finance VisitorsVisitorsRead0NoneFinance Owners
Imaging Archive OwnersOwnersFull Control2NoneImaging Archive Owners
Imaging Archive MembersMembersEdit4NoneImaging Archive Owners
Imaging Archive VisitorsVisitorsRead0NoneImaging Archive Owners
Marketing OwnersOwnersFull Control1NoneMarketing Owners
Marketing MembersMembersEdit1NoneMarketing Owners
Marketing VisitorsVisitorsRead0NoneMarketing Owners
Old Projects OwnersOwnersFull Control1NoneOld Projects Owners
Old Projects MembersMembersEdit4NoneOld Projects Owners
Old Projects VisitorsVisitorsRead0NoneOld Projects Owners
Patient Records OwnersOwnersFull Control1NonePatient Records Owners
Patient Records MembersMembersEdit1NonePatient Records Owners
Patient Records VisitorsVisitorsRead0NonePatient Records Owners
Practice Management OwnersOwnersFull Control1NonePractice Management Owners
Practice Management MembersMembersEdit1NonePractice Management Owners
Practice Management VisitorsVisitorsRead0NonePractice Management Owners
Staff Intranet OwnersOwnersFull Control1NoneStaff Intranet Owners
Staff Intranet MembersMembersEdit4NoneStaff Intranet Owners
Staff Intranet VisitorsVisitorsRead1NoneStaff Intranet Owners

Lists and libraries with their own permissions 2

CSV

Lists and libraries that stopped inheriting their site's permissions, so the site's groups don't say who can open them. Each is worth a look: the reason is often a one-off that was never undone.

SiteList or libraryTypeItemsWho can open it
FinancePayrollLibrary64Finance Owners (Full Control), Zara Edwards (Edit)
Patient Records lowLab referralsLibrary38Patient Records Owners (Full Control), Patient Records Members (Contribute), Lab (Read)

Subsites with their own permissions 1

Subsites that don't inherit their parent site's permissions.

SiteSubsiteWho can open it
Staff IntranetHRStaff Intranet Owners (Full Control), Zara Edwards (Edit)

Everyone who can get into at least one site, through any group or directly, with guests and outside accounts first. Microsoft 365 and security groups are opened up where the Groups collection has their members.

PersonOutside the organisationSitesHighest levelWhich sites
accounts@hollis-partners.example highYes1Full ControlFinance
anna.kowalski@fabrikam.exampleNo5Full ControlFinance, Imaging Archive
and 3 moreMarketing, Patient Records, Staff Intranet
aaron.smith@fabrikam.exampleNo3Full ControlImaging Archive, Old Projects, Patient Records
arthur.lee@fabrikam.exampleNo3EditMarketing, Patient Records, Staff Intranet
thomas.allen@fabrikam.exampleNo3EditOld Projects, Practice Management, Staff Intranet
aisha.brown@fabrikam.exampleNo2EditPatient Records, Practice Management
amelia.khan@fabrikam.exampleNo2EditFinance, Marketing
ben.okafor@fabrikam.exampleNo2Full ControlMarketing, Old Projects
george.baker@fabrikam.exampleNo2EditImaging Archive, Staff Intranet
lily.khan@fabrikam.exampleNo2EditMarketing, Practice Management
noah.harris@fabrikam.exampleNo2EditOld Projects, Practice Management
owen.robinson@fabrikam.exampleNo2EditPatient Records, Practice Management
ruby.davies@fabrikam.exampleNo2EditFinance, Marketing
thomas.johnson@fabrikam.exampleNo2EditMarketing, Patient Records
zara.edwards@fabrikam.exampleNo2Full ControlMarketing, Practice Management
arthur.williams@fabrikam.exampleNo1EditPractice Management
ava.jackson@fabrikam.exampleNo1EditMarketing
ava.thomas@fabrikam.exampleNo1EditFinance
chloe.jackson@fabrikam.exampleNo1EditFinance
ethan.jones@fabrikam.exampleNo1EditPatient Records
george.williams@fabrikam.exampleNo1EditMarketing
isla.scott@fabrikam.exampleNo1EditMarketing
jack.lee@fabrikam.exampleNo1Full ControlImaging Archive
jack.ward@fabrikam.exampleNo1EditFinance
lily.white@fabrikam.exampleNo1EditPatient Records
megan.green@fabrikam.exampleNo1EditPractice Management
megan.king@fabrikam.exampleNo1EditPatient Records
olivia.taylor@fabrikam.exampleNo1EditFinance
owen.patel@fabrikam.exampleNo1EditPractice Management
owen.smith@fabrikam.exampleNo1EditOld Projects
ruby.clark@fabrikam.exampleNo1Full ControlFinance
thomas.robinson@fabrikam.exampleNo1EditPractice Management

Read from SharePoint for 7 sites. Hidden levels such as Limited Access, which SharePoint adds when a single file is shared, are left out.

Data from Site permissions (), Groups and Teams (), Users ().