Permissions Reports Screen

The Permissions Reports section contains a number of reports on SharePoint Permissions and Logical and Structural Reports. With these reports a SharePoint administrator can track permissions for different users and groups across a SharePoint farm and easily manage the SharePoint environment.

Available Permissions reports are:

  • Unique Permissions – shows SharePoint objects (sites, lists, items) with unique permissions, e.g. objects with broken permission inheritance.
  • Site Collection Hierarchy – shows all principals and their permissions across the selected site collection. It also includes a complete hierarchy structure overview including, objects with broken permission inheritance. Use the content display level filter to select how granular these reports should be—they go down to the list item level.
  • SharePoint Groups – shows all SharePoint groups and its members across the selected site collections.
  • Cleanup Reports are a subgroup of the Site Collection Reports. The following reports are available:
    • Groups Without Permissions – lists all SharePoint groups that haven’t been assigned any permissions. This includes groups with ”Limited Access” that remained after their permissions on a specific item in this site collection were removed.
    • Groups With Disabled Owner – lists all SharePoint groups whose owners have been disabled in Active Directory.
    • Groups Without Users – lists all SharePoint groups without any members.
    • Orphaned Users – lists all farm users that still have access to the farm and are listed under Site Collection user, but have been disabled or deleted in Active Directory.
    • Users Without Permissions – lists all users that no longer have any permissions assigned, neither directly nor through some of the SharePoint groups. This also includes users with ”Limited Access” that have remained after their permissions on a specific item in this site collection have been removed.
  • Subsite Hierarchy – shows all the principals and their permissions (all or unique) on selected subsite, down to the list item. With Content Display Level you can decide how granular the report will be and how it will be structured.
  • Subsite Permissions Details – shows which types of base permissions are present on a selected subsite (one or more). Each permissions category displays the list of users that have been granted that type of permission as well as the principal’s role, type, and how they got this type of permissions.
  • Subsite Permissions Matrix – shows all principals on a selected subsite and which permission level each of them has. If you select the Show option in the Show details filter, you will see how they got a specific permission.
  • List Hierarchy – shows all principals and their permissions (all or unique) on a selected list.
  • List Permissions Details – shows which types of base permissions are present on a selected list (one or more). Each permissions category displays the list of users that have been granted that type of permission as well as the principal’s role, type, and how the principal got this type of permission.
  • List Permissions Matrix – shows all principals on selected list and which permission level each of them has. If you select the Show option in the Show details filter, you will see how they got a specific permission.
  • List Item Permissions Details – shows which types of base permissions are present on a selected list item (one or more). Each permissions category displays the list of users that have been granted that type of permission as well as the principal’s role, type, and how he got this type of permissions.
  • List Item Permissions Matrix – shows all principals on a selected list item and which permission level each of them has. If you select the Show option in the Show details filter, you will see how they got a specific permission.
  • User Permissions Overview – summary of principal’s permissions on the farm. Shows site collections in which a user has permissions, permissions that this user has as an individual, and the permissions that were given through a group. To see a more detailed permissions breakdown on a particular site collection, use the Explore Permissions button.
  • User Permissions Details – shows all permissions on all subsites inside a selected site collection for a specific user. The report shows permissions that a certain user has on each item within the particular site collection, along with the permissions that were given through a group. To see a more detailed permissions breakdown of a particular subsite, list, or list item, use the Explore Permissions button.
  • Group Members – shows all members of a selected SharePoint or Active Directory group. By using the Principal Status filter, you can check for enabled or disabled users, and change the report display type from flat to structured by using the Layout type filter.
  • Member Of – shows all the groups the selected principal is a member of.
  • All Farm Users – shows all users with permissions on all your farms, sorted by domain. This report also provides information about a user’s status in AD (enabled or disabled).
  • Number of Users per Site – shows the number of users with some type of permission across the entire farm, grouped by site collections. This total number is then broken down by their active and disabled status.
  • Users with Privileged Access – shows all users with privileged access on the farm, i.e., site administrators, or primary and secondary administrators.
  • Visit resources center for videos and samples of SharePoint documentation and reports by SPDocKit.