Security Manager provides a unique method for visually comparing and synchronizing permissions within any two site collections, sites or lists. The Live Compare! interface displays up to the moment differences between these objects and allows the user to drill-down and copy the differences to either environment.
The Live Compare! interface consists of single window separated into two parts. A user can drill down into any object type to compare or re-compare that object against its counterpart in the other site. The two "Copy from-" buttons at the top of the window initiate a standard copy operation and will prompt a Wizard.
This window displays SharePoint groups associated with a specific site. It may be accessed by selecting a site from the Navigation Pane and then pressing the Groups button in the ribbon.
As with all windows, users will be able to select one or more of these objects and copy them from one place to another. There are also more specific operations available within the interface including adding and removing users from a group, creating, editing or deletion of groups and removing permissions.
Before running a SharePoint Groups report you will be presented with 2 optional parameters, Show Orphaned Groups and Show Total Members.
·Show Orphaned Groups - When included, this will add another parameter to the results which will highlight which of the groups are orphaned (if any are).
NOTE: this process can be extremely time consuming to complete.
·Show Total Members - When included, this will add another parameter to the results displaying the number of members per group.
This window displays all the permissions for a specific site, list, library or item. It may be accessed by selecting a site, list or library from the Navigation Pane or an item from a Content Pane and then pressing the Object Permissions button in the ribbon (you may also double-click on an object in Navigator.
As with all windows, users will be able to select one or more of these objects and copy them from one place to another. There are also more specific operations available within the interface including granting new permissions, editing or deleting existing permissions and breaking inheritance.
An extension to the Object Permissions Report, a real-time comparison between the selected object's permissions and those of it's (inherited) parent is generated to highlight what is truly "unique" with the permissions compared to those above. The "parent" may be defined as the object immediately above this one or if that object inherits its permissions, then it may be a level or more higher (folder, list or site). This extended report is available on any object that has a unique set of permissions, with the exception of root site collections, and can be generated by clicking on the Permission Differences button located in the Permission report toolbar. Once generated, the results can then be exported to an Excel file (*.xlsx) for viewing or sharing outside of Essentials.
Permission Difference report button
Permission Difference report Export to Excel button
This report adds a forth column "Parent Permission Level" to display the permission level of this user or group to the parent object and highlights these differences using a series of colors for quick identification. The following colors are used:
Gray - no difference in permission level between this object and its parent
Red - the user or group has permissions to both, however the set of permission levels is different
Blue - the user or group only has permission to one of these objects, but not both
The screenshot below is an example of this report displaying a uniquely secured document compared to its parent.
Please note that SharePoint grants "Limited Access" to users and groups in certain scenarios and having Limited Access to an object will be handled as a permission difference; therefore this will be shown in Red as opposed to having no access which is shown in Blue. There are a few examples of this behavior in the screenshot above.