Harbour ITMenu

Powered by Office Sentry 2.2.0

You're in the demo. Three fictional clients with made-up people. Look around freely: nothing can be changed, and it all resets every night.Get Office Sentry
Clients/Contoso Legal LLP

Contoso Legal LLP

contoso.onmicrosoft.com

Site permissions

Who holds which permission level on each SharePoint site, through which SharePoint group, and the lists, libraries and subsites with permissions of their own.

All clients
Download PDFXLSX

Every permission level on each site, with SharePoint groups opened up into their members. Permissions on single files and folders are in File and folder permissions.

WhoTypeHowPermission levelOutside the organisation
Owners of OperationsMicrosoft 365 group ownersThrough Operations OwnersFull ControlNo
Members of OperationsMicrosoft 365 groupThrough Operations MembersEditNo

Each site's SharePoint groups: its owners, members and visitors groups and any others, what each grants on the site and who is in it. A guest in an owners group has full control of the site.

SiteRole on the sitePermission levelMembersGuestsGroup owner
ClientsOwnersFull Control1NoneClients Owners
ClientsMembersEdit1NoneClients Owners
ClientsVisitorsRead0NoneClients Owners
FinanceOwnersFull Control1NoneFinance Owners
FinanceMembersEdit1NoneFinance Owners
FinanceVisitorsRead0NoneFinance Owners
MarketingOwnersFull Control1NoneMarketing Owners
MarketingMembersEdit1NoneMarketing Owners
MarketingVisitorsRead0NoneMarketing Owners
OperationsOwnersFull Control1NoneOperations Owners
OperationsMembersEdit1NoneOperations Owners
OperationsVisitorsRead0NoneOperations Owners
Staff IntranetOwnersFull Control1NoneStaff Intranet Owners
Staff IntranetMembersEdit4NoneStaff Intranet Owners
Staff IntranetVisitorsRead1NoneStaff Intranet Owners

Lists and libraries with their own permissions 2

CSV

Lists and libraries that stopped inheriting their site's permissions, so the site's groups don't say who can open them. Each is worth a look: the reason is often a one-off that was never undone.

SiteList or libraryTypeItemsWho can open it
Clients lowEngagement lettersLibrary38Clients Owners (Full Control), Clients Members (Contribute), D Mason (Read)
FinancePayrollLibrary64Finance Owners (Full Control), Joseph Morris (Edit)

Subsites with their own permissions 1

Subsites that don't inherit their parent site's permissions.

SiteSubsiteWho can open it
Staff IntranetHRStaff Intranet Owners (Full Control), Joseph Morris (Edit)

Access by person 21

Everyone who can get into at least one site, through any group or directly, with guests and outside accounts first. Microsoft 365 and security groups are opened up where the Groups collection has their members.

PersonOutside the organisationSitesHighest levelWhich sites
accounts@hollis-partners.example highYes1Full ControlFinance
d.mason@mason-legal.example lowYes1ReadClients
annabel.fraser@contoso.exampleNo5Full ControlClients, Finance
and 3 moreMarketing, Operations, Staff Intranet
jacob.johnson@contoso.exampleNo4EditClients, Finance
and 2 moreMarketing, Operations
owen.taylor@contoso.exampleNo4EditClients, Finance
and 2 moreMarketing, Staff Intranet
rhys.evans@contoso.exampleNo4EditClients, Finance
and 2 moreMarketing, Operations
evie.davis@contoso.exampleNo3Full ControlClients, Operations, Staff Intranet
jack.white@contoso.exampleNo3EditClients, Finance, Operations
lily.harrison@contoso.exampleNo3Full ControlFinance, Marketing, Operations
oliver.hill@contoso.exampleNo3Full ControlClients, Marketing, Operations
sophie.taylor@contoso.exampleNo3EditClients, Marketing, Operations
ella.thomas@contoso.exampleNo2EditClients, Operations
megan.smith@contoso.exampleNo2EditClients, Operations
noah.clark@contoso.exampleNo2EditFinance, Operations
william.clark@contoso.exampleNo2EditClients, Staff Intranet
bobby.marsh@contoso.exampleNo1Full ControlMarketing
joseph.morris@contoso.exampleNo1EditOperations
olivia.ward@contoso.exampleNo1EditOperations
olivia.wilson@contoso.exampleNo1EditClients
priya.hughes@contoso.exampleNo1EditOperations
william.allen@contoso.exampleNo1EditFinance

Read from SharePoint for 5 sites. Hidden levels such as Limited Access, which SharePoint adds when a single file is shared, are left out.

Data from Site permissions (), Groups and Teams (), Users ().