Harbour ITMenu

Powered by Office Sentry 2.2.0

You're in the demo. Three fictional clients with made-up people. Look around freely: nothing can be changed, and it all resets every night.Get Office Sentry
Clients/Contoso Legal LLP

Contoso Legal LLP

contoso.onmicrosoft.com

Site permissions

Who holds which permission level on each SharePoint site, through which SharePoint group, and the lists, libraries and subsites with permissions of their own.

All clients
Download PDFXLSX

Every permission level on each site, with SharePoint groups opened up into their members. Permissions on single files and folders are in File and folder permissions.

WhoTypeHowPermission levelOutside the organisation
Everyone except external users lowEveryoneThrough Staff Intranet VisitorsReadNo

Each site's SharePoint groups: its owners, members and visitors groups and any others, what each grants on the site and who is in it. A guest in an owners group has full control of the site.

GroupRole on the sitePermission levelMembersGuestsGroup owner
Clients OwnersOwnersFull Control1NoneClients Owners
Clients MembersMembersEdit1NoneClients Owners
Clients VisitorsVisitorsRead0NoneClients Owners
Finance OwnersOwnersFull Control1NoneFinance Owners
Finance MembersMembersEdit1NoneFinance Owners
Finance VisitorsVisitorsRead0NoneFinance Owners
Marketing OwnersOwnersFull Control1NoneMarketing Owners
Marketing MembersMembersEdit1NoneMarketing Owners
Marketing VisitorsVisitorsRead0NoneMarketing Owners
Operations OwnersOwnersFull Control1NoneOperations Owners
Operations MembersMembersEdit1NoneOperations Owners
Operations VisitorsVisitorsRead0NoneOperations Owners
Staff Intranet OwnersOwnersFull Control1NoneStaff Intranet Owners
Staff Intranet MembersMembersEdit4NoneStaff Intranet Owners
Staff Intranet VisitorsVisitorsRead1NoneStaff Intranet Owners

Lists and libraries with their own permissions 2

CSV

Lists and libraries that stopped inheriting their site's permissions, so the site's groups don't say who can open them. Each is worth a look: the reason is often a one-off that was never undone.

SiteList or libraryTypeItemsWho can open it
Clients lowEngagement lettersLibrary38Clients Owners (Full Control), Clients Members (Contribute), D Mason (Read)
FinancePayrollLibrary64Finance Owners (Full Control), Joseph Morris (Edit)

Subsites with their own permissions 1

Subsites that don't inherit their parent site's permissions.

SiteSubsiteWho can open it
Staff IntranetHRStaff Intranet Owners (Full Control), Joseph Morris (Edit)

Access by person 21

Everyone who can get into at least one site, through any group or directly, with guests and outside accounts first. Microsoft 365 and security groups are opened up where the Groups collection has their members.

PersonOutside the organisationSitesHighest levelWhich sites
accounts@hollis-partners.example highYes1Full ControlFinance
d.mason@mason-legal.example lowYes1ReadClients
annabel.fraser@contoso.exampleNo5Full ControlClients, Finance
and 3 moreMarketing, Operations, Staff Intranet
jacob.johnson@contoso.exampleNo4EditClients, Finance
and 2 moreMarketing, Operations
owen.taylor@contoso.exampleNo4EditClients, Finance
and 2 moreMarketing, Staff Intranet
rhys.evans@contoso.exampleNo4EditClients, Finance
and 2 moreMarketing, Operations
evie.davis@contoso.exampleNo3Full ControlClients, Operations, Staff Intranet
jack.white@contoso.exampleNo3EditClients, Finance, Operations
lily.harrison@contoso.exampleNo3Full ControlFinance, Marketing, Operations
oliver.hill@contoso.exampleNo3Full ControlClients, Marketing, Operations
sophie.taylor@contoso.exampleNo3EditClients, Marketing, Operations
ella.thomas@contoso.exampleNo2EditClients, Operations
megan.smith@contoso.exampleNo2EditClients, Operations
noah.clark@contoso.exampleNo2EditFinance, Operations
william.clark@contoso.exampleNo2EditClients, Staff Intranet
bobby.marsh@contoso.exampleNo1Full ControlMarketing
joseph.morris@contoso.exampleNo1EditOperations
olivia.ward@contoso.exampleNo1EditOperations
olivia.wilson@contoso.exampleNo1EditClients
priya.hughes@contoso.exampleNo1EditOperations
william.allen@contoso.exampleNo1EditFinance

Read from SharePoint for 5 sites. Hidden levels such as Limited Access, which SharePoint adds when a single file is shared, are left out.

Data from Site permissions (), Groups and Teams (), Users ().