It is important to maintain least privilege in an organization to prevent data breaches. Making sure users and groups only have the necessary access to SharePoint sites and folders is vital. SharePoint Manager Plus' security and permission reports are the eyes and ears of your SharePoint environment. These reports help answer questions including:
- Which sites and files have unique permissions?
- Which users were assigned permissions directly?
- Which files have been shared externally outside the organization?
- What permissions were assigned to Active Directory and SharePoint groups?
- Which items do not inherit permissions from their parent?
With SharePoint Manager Plus, generate permissions and security reports for SharePoint Online and on-premise SharePoint versions including 2013, 2016, 2019, and Subscription Edition. The list of permission reports available in SharePoint Manager Plus are listed below.
- Site permission reports
- Document Library Permissions report
- List Permissions report
- List Item Permissions report
- Folder Permissions report
- File Permissions report
- Orphaned Users report
- External and sharing access report
- Permissions Non Inherited Lists report
- Permissions Non-Inherited List Items report
- User and site access reports
- Group Configurations report
Site permission reports
View all site-wide permissions assigned to users and also to SharePoint and Active Directory groups. Find out which users have been assigned permissions directly, as opposed to through groups, and which items have unique permissions.
Document Library Permissions report
See who can access each document library across your sites. Detect broken inheritance, enforce least privilege, and keep an audit-ready record of permission changes.
List Permissions report
Review who has access to each list across your environment. Spot overshared lists and verify permission boundaries during audits.
List Item Permissions report
Audit permissions at the most granular level SharePoint exposes: individual list items. Find out which items have broken inheritance, who holds access to them, and when those permissions were created or modified.
Folder Permissions report
Get environment-wide visibility into who can access every folder in SharePoint, where inheritance breaks and access sprawl tend to start.
File Permissions report
Trace access down to individual files in your document libraries. Find out which users and groups can reach each file, and how group memberships resolve to individual users.
Orphaned Users report
View users who are no longer present in Active Directory but still have permission to your sites. Identify and remove those users to declutter your SharePoint environment.
External and sharing access reports
View the external users that have access to your SharePoint objects. Also, gain insights on anonymously shared objects with sharing links and the links that have expired.
Permissions Non Inherited Lists report
See every list and document library that has broken away from its parent site's permissions. The report also lists the created time, item modified, and deleted times to help you understand list activity.
Permissions Non-Inherited List Items report
Drill down to the individual list items, folders, and files that no longer inherit permissions from their parent list. Find out where unique security scopes have been carved out at the most granular level so you can catch privilege sprawl before it becomes hard to manage.
User and site access reports
View all users and groups that have access to your sites with information on group owners, members, and user count. Also, get information on deleted users and site collection administrators.
Group Configurations report
Get insights on group configurations, such as which group members can view or edit membership and which members are required to raise a request to join or leave a group.
Benefits of SharePoint permission and security reports
- Hybrid reporting: Generate permission reports without PowerShell for both SharePoint Online and on-premises versions.
- Customized reports: Create custom reports with granular control based on your organizational needs.
- Scheduling: Schedule reports to generate at particular or regular intervals and get them delivered to email addresses of your choice.
- Secure delegation: Delegate specific reports to technicians without giving them access to all the reports.
