SharePoint: Permissions report for a given user - SharePoint admin center

🚨 The Signal: SharePoint admins can now generate a detailed report of a specific user's direct and indirect permissions across all SharePoint sites, libraries, folders, and files. This enhances visibility into data access, aiding in identifying over-privileged accounts and potential data exposure risks.

The Impact

SharePoint admins and security teams are affected, gaining better visibility into data access risks.

  • SharePoint Admins: Can quickly identify users with excessive permissions, reducing over-privileging risks.
  • Security Teams: Improved audit capabilities for data access, enhancing compliance posture.
  • Compliance Officers: Easier to demonstrate adherence to data access governance policies.
  • Auditors: Streamlined process for reviewing user access rights to sensitive data.

The Action

  1. Navigate to SharePoint admin center > Data access governance.
  2. Select 'Permissions report for a given user'.
  3. Enter the user principal name (UPN) of the user to report on.
  4. Generate the report to review direct and indirect permissions.
  5. Use the report to identify and remediate any excessive permissions.

Domain: SharePoint · Impact: medium · Workload: SharePoint · Essential Eight: Restrict Administrative Privileges · ISM: ISM-0445, ISM-1175, ISM-1380, ISM-1507, ISM-1508, ISM-1509, ISM-1647, ISM-1648, ISM-1650, ISM-1686, ISM-1688, ISM-1689, ISM-1883, ISM-1897, ISM-1898