The Site Permissions analysis lets you examine the permissions that one or more users have for selected sites, including external users.
To generate a Site Permissions analysis:
1Select the object(s) you want to include in your analysis.
2Choose Users and Security > Site Permissions.
3Specify the parameters for your analysis.
Note that, In addition to the "standard" parameters, you have the option to Group by Sites (the default) or Users.
Now you can:
·run the operation immediately (by clicking the [Run Now] button)
OR
·schedule the operation to run at a later time or on a recurring basis.
OR
·save the operation as XML Instructions that can be run at a later time.
The top level of the User Rights section lists the Web application(s) within the scope of your analysis.
When expanded, a list of users with permissions for the site collection or site displays, along with the following information:
·the login name of the SharePoint User
·the user's permission level(s), as indicated by a plus sign (+) in the applicable column(s), which may include:
§the site collection's Admin group
§the five default SharePoint permission levels:
§Full Control
§Design
§Contribute
§Read
§Limited.
NOTE: If a user has a template-specific or custom permission level, it is recorded in the Other column.
By default, the report lists:
·users with direct permissions, and
·users with membership through Active Directory/tenant-level Security groups and SharePoint groups.
The Display Name/Group column shows the display name of each user whose permissions are direct or through membership in a SharePoint group. If a display name does not exist for the user, the user's login name will display in brackets < >.
If you chose to group by Sites, you can click the AD hyperlink to the left of an AD group in the User Rights section to view Active Directory/Security group members.
NOTE: Because ControlPoint cannot currently expand membership in Office 365 groups, when the AD link is clicked the dialog will be blank.
Note that in the following example, the external user is identified by his external email address.
© 2025 Quest Software Inc. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center