Harbour ITMenu

Powered by Office Sentry 2.2.0

You're in the demo. Three fictional clients with made-up people. Look around freely: nothing can be changed, and it all resets every night.Get Office Sentry
Clients/Fabrikam Dental Group

Fabrikam Dental Group

fabrikam.onmicrosoft.com

Site permissions

Who holds which permission level on each SharePoint site, through which SharePoint group, and the lists, libraries and subsites with permissions of their own.

All clients
Download PDFXLSX

Every permission level on each site, with SharePoint groups opened up into their members. Permissions on single files and folders are in File and folder permissions.

WhoTypeHowPermission levelOutside the organisation
george.baker@fabrikam.examplePersonThrough Imaging Archive MembersEditNo
george.baker@fabrikam.examplePersonThrough Staff Intranet MembersEditNo

Each site's SharePoint groups: its owners, members and visitors groups and any others, what each grants on the site and who is in it. A guest in an owners group has full control of the site.

SiteGroupRole on the sitePermission levelGuestsGroup owner
FinanceFinance OwnersOwnersFull ControlNoneFinance Owners
FinanceFinance MembersMembersEditNoneFinance Owners
FinanceFinance VisitorsVisitorsReadNoneFinance Owners
Imaging ArchiveImaging Archive OwnersOwnersFull ControlNoneImaging Archive Owners
Imaging ArchiveImaging Archive MembersMembersEditNoneImaging Archive Owners
Imaging ArchiveImaging Archive VisitorsVisitorsReadNoneImaging Archive Owners
MarketingMarketing OwnersOwnersFull ControlNoneMarketing Owners
MarketingMarketing MembersMembersEditNoneMarketing Owners
MarketingMarketing VisitorsVisitorsReadNoneMarketing Owners
Old ProjectsOld Projects OwnersOwnersFull ControlNoneOld Projects Owners
Old ProjectsOld Projects MembersMembersEditNoneOld Projects Owners
Old ProjectsOld Projects VisitorsVisitorsReadNoneOld Projects Owners
Patient RecordsPatient Records OwnersOwnersFull ControlNonePatient Records Owners
Patient RecordsPatient Records MembersMembersEditNonePatient Records Owners
Patient RecordsPatient Records VisitorsVisitorsReadNonePatient Records Owners
Practice ManagementPractice Management OwnersOwnersFull ControlNonePractice Management Owners
Practice ManagementPractice Management MembersMembersEditNonePractice Management Owners
Practice ManagementPractice Management VisitorsVisitorsReadNonePractice Management Owners
Staff IntranetStaff Intranet OwnersOwnersFull ControlNoneStaff Intranet Owners
Staff IntranetStaff Intranet MembersMembersEditNoneStaff Intranet Owners
Staff IntranetStaff Intranet VisitorsVisitorsReadNoneStaff Intranet Owners

Lists and libraries with their own permissions 2

CSV

Lists and libraries that stopped inheriting their site's permissions, so the site's groups don't say who can open them. Each is worth a look: the reason is often a one-off that was never undone.

SiteList or libraryTypeItemsWho can open it
FinancePayrollLibrary64Finance Owners (Full Control), Zara Edwards (Edit)
Patient Records lowLab referralsLibrary38Patient Records Owners (Full Control), Patient Records Members (Contribute), Lab (Read)

Subsites with their own permissions 1

Subsites that don't inherit their parent site's permissions.

SiteSubsiteWho can open it
Staff IntranetHRStaff Intranet Owners (Full Control), Zara Edwards (Edit)

Everyone who can get into at least one site, through any group or directly, with guests and outside accounts first. Microsoft 365 and security groups are opened up where the Groups collection has their members.

PersonOutside the organisationSitesHighest levelWhich sites
accounts@hollis-partners.example highYes1Full ControlFinance
anna.kowalski@fabrikam.exampleNo5Full ControlFinance, Imaging Archive
and 3 moreMarketing, Patient Records, Staff Intranet
aaron.smith@fabrikam.exampleNo3Full ControlImaging Archive, Old Projects, Patient Records
arthur.lee@fabrikam.exampleNo3EditMarketing, Patient Records, Staff Intranet
thomas.allen@fabrikam.exampleNo3EditOld Projects, Practice Management, Staff Intranet
aisha.brown@fabrikam.exampleNo2EditPatient Records, Practice Management
amelia.khan@fabrikam.exampleNo2EditFinance, Marketing
ben.okafor@fabrikam.exampleNo2Full ControlMarketing, Old Projects
george.baker@fabrikam.exampleNo2EditImaging Archive, Staff Intranet
lily.khan@fabrikam.exampleNo2EditMarketing, Practice Management
noah.harris@fabrikam.exampleNo2EditOld Projects, Practice Management
owen.robinson@fabrikam.exampleNo2EditPatient Records, Practice Management
ruby.davies@fabrikam.exampleNo2EditFinance, Marketing
thomas.johnson@fabrikam.exampleNo2EditMarketing, Patient Records
zara.edwards@fabrikam.exampleNo2Full ControlMarketing, Practice Management
arthur.williams@fabrikam.exampleNo1EditPractice Management
ava.jackson@fabrikam.exampleNo1EditMarketing
ava.thomas@fabrikam.exampleNo1EditFinance
chloe.jackson@fabrikam.exampleNo1EditFinance
ethan.jones@fabrikam.exampleNo1EditPatient Records
george.williams@fabrikam.exampleNo1EditMarketing
isla.scott@fabrikam.exampleNo1EditMarketing
jack.lee@fabrikam.exampleNo1Full ControlImaging Archive
jack.ward@fabrikam.exampleNo1EditFinance
lily.white@fabrikam.exampleNo1EditPatient Records
megan.green@fabrikam.exampleNo1EditPractice Management
megan.king@fabrikam.exampleNo1EditPatient Records
olivia.taylor@fabrikam.exampleNo1EditFinance
owen.patel@fabrikam.exampleNo1EditPractice Management
owen.smith@fabrikam.exampleNo1EditOld Projects
ruby.clark@fabrikam.exampleNo1Full ControlFinance
thomas.robinson@fabrikam.exampleNo1EditPractice Management

Read from SharePoint for 7 sites. Hidden levels such as Limited Access, which SharePoint adds when a single file is shared, are left out.

Data from Site permissions (), Groups and Teams (), Users ().