Harbour ITMenu

Powered by Office Sentry 2.2.0

You're in the demo. Three fictional clients with made-up people. Look around freely: nothing can be changed, and it all resets every night.Get Office Sentry
Clients/Contoso Legal LLP

Contoso Legal LLP

contoso.onmicrosoft.com

Site permissions

Who holds which permission level on each SharePoint site, through which SharePoint group, and the lists, libraries and subsites with permissions of their own.

All clients
Download PDFXLSX

Every permission level on each site, with SharePoint groups opened up into their members. Permissions on single files and folders are in File and folder permissions.

WhoTypeHowPermission levelOutside the organisation
Everyone except external users lowEveryoneThrough Staff Intranet VisitorsReadNo

Each site's SharePoint groups: its owners, members and visitors groups and any others, what each grants on the site and who is in it. A guest in an owners group has full control of the site.

SiteGroupRole on the sitePermission levelMembersGroup owner
ClientsClients OwnersOwnersFull Control1Clients Owners
ClientsClients MembersMembersEdit1Clients Owners
ClientsClients VisitorsVisitorsRead0Clients Owners
FinanceFinance OwnersOwnersFull Control1Finance Owners
FinanceFinance MembersMembersEdit1Finance Owners
FinanceFinance VisitorsVisitorsRead0Finance Owners
MarketingMarketing OwnersOwnersFull Control1Marketing Owners
MarketingMarketing MembersMembersEdit1Marketing Owners
MarketingMarketing VisitorsVisitorsRead0Marketing Owners
OperationsOperations OwnersOwnersFull Control1Operations Owners
OperationsOperations MembersMembersEdit1Operations Owners
OperationsOperations VisitorsVisitorsRead0Operations Owners
Staff IntranetStaff Intranet OwnersOwnersFull Control1Staff Intranet Owners
Staff IntranetStaff Intranet MembersMembersEdit4Staff Intranet Owners
Staff IntranetStaff Intranet VisitorsVisitorsRead1Staff Intranet Owners

Lists and libraries with their own permissions 2

CSV

Lists and libraries that stopped inheriting their site's permissions, so the site's groups don't say who can open them. Each is worth a look: the reason is often a one-off that was never undone.

SiteList or libraryTypeItemsWho can open it
Clients lowEngagement lettersLibrary38Clients Owners (Full Control), Clients Members (Contribute), D Mason (Read)
FinancePayrollLibrary64Finance Owners (Full Control), Joseph Morris (Edit)

Subsites with their own permissions 1

Subsites that don't inherit their parent site's permissions.

SiteSubsiteWho can open it
Staff IntranetHRStaff Intranet Owners (Full Control), Joseph Morris (Edit)

Access by person 21

Everyone who can get into at least one site, through any group or directly, with guests and outside accounts first. Microsoft 365 and security groups are opened up where the Groups collection has their members.

PersonOutside the organisationSitesHighest levelWhich sites
accounts@hollis-partners.example highYes1Full ControlFinance
d.mason@mason-legal.example lowYes1ReadClients
annabel.fraser@contoso.exampleNo5Full ControlClients, Finance
and 3 moreMarketing, Operations, Staff Intranet
jacob.johnson@contoso.exampleNo4EditClients, Finance
and 2 moreMarketing, Operations
owen.taylor@contoso.exampleNo4EditClients, Finance
and 2 moreMarketing, Staff Intranet
rhys.evans@contoso.exampleNo4EditClients, Finance
and 2 moreMarketing, Operations
evie.davis@contoso.exampleNo3Full ControlClients, Operations, Staff Intranet
jack.white@contoso.exampleNo3EditClients, Finance, Operations
lily.harrison@contoso.exampleNo3Full ControlFinance, Marketing, Operations
oliver.hill@contoso.exampleNo3Full ControlClients, Marketing, Operations
sophie.taylor@contoso.exampleNo3EditClients, Marketing, Operations
ella.thomas@contoso.exampleNo2EditClients, Operations
megan.smith@contoso.exampleNo2EditClients, Operations
noah.clark@contoso.exampleNo2EditFinance, Operations
william.clark@contoso.exampleNo2EditClients, Staff Intranet
bobby.marsh@contoso.exampleNo1Full ControlMarketing
joseph.morris@contoso.exampleNo1EditOperations
olivia.ward@contoso.exampleNo1EditOperations
olivia.wilson@contoso.exampleNo1EditClients
priya.hughes@contoso.exampleNo1EditOperations
william.allen@contoso.exampleNo1EditFinance

Read from SharePoint for 5 sites. Hidden levels such as Limited Access, which SharePoint adds when a single file is shared, are left out.

Data from Site permissions (), Groups and Teams (), Users ().