Clone Sharepoint Onilne Permissions using csv file

Question

Clone Sharepoint Onilne Permissions using csv file

Tamir Giladi - Comoz Technologies 40

Hi team,

I exported a report from SharePoint 'Site Usage' page ► 'Shared with external users' ► 'Run Report'.

This report is a CSV file that contains the following columns:

User's image

I'm looking for a powershell script to clone permissions between source email address from the list to another target email address.

I would appreciate your assistance.

Tamir

Ling Zhou_MSFT 23,620 Reputation points Microsoft External Staff

2023-08-16T08:30:59.4966667+00:00

Hi @Tamir Giladi - Comoz Technologies,

Thank you for posting in this community.

I am sorry I don't quite understand your question. I can't find source email address and target email address in your picture. Can you describe to me in detail what these two email addresses are and how you want to copy the permissions?

Your time and patience is much appreciated. If there is any other assistance I can provide, please feel free to let me know.

Tamir Giladi - Comoz Technologies 40

Hן @Ling Zhou_MSFT ,

My source email would be found on "user Email" column.

I have an example of a sctiprt that clones permissions. However it misses a lot so cloneing permissions from this csv file might be the ultimate solution for the misses permissions.

#Function to copy group memberships from one user to another
Function Clone-SPOUserGroupPermission($SiteURL, $SourceUserID, $TargetUserID)
{
    Try {
        #Get the Site collection
        $Site = Get-SPOSite $SiteURL
     
        #Get the Source user
        $SourceUser = Get-SPOUser -Site $Site -LoginName $SourceUserID
 
        #Get All groups of the source User
        $UserGroups = $SourceUser.Groups
     
        If($UserGroups.Count -gt 0)
        {
            Write-host -f Yellow "Found the User Member of $($UserGroups.Count) Group(s)..."
 
            #Loop through each group of the source user and add target user to that group
            ForEach ($Group in $UserGroups)
            {
                #Add Target User to the Group
                Add-SPOUser -Site $Site -LoginName $TargetUserID -Group $Group | out-null   
                Write-Host -f Green "Added $TargetUserID to Group '$Group'"
            }
        }
    }
    Catch {
        Write-host $_.Exception.Message -f Red
     }
}
 
#SharePoint Online Admin Center URL
$AdminCenterURL = "https://yourdomain-admin.sharepoint.com/"
$SiteURL = "https://yourdomain.sharepoint.com/sites/sitename"
$SourceUserID ="******@yourdomain.com"
$TargetUserID ="******@yourdomain.com"
 
#Connect to SharePoint Online Admin Center
Connect-SPOService -Url $AdminCenterURL -Credential (Get-Credential)

#Call the Function
Clone-SPOUserGroupPermission -SiteURL $SiteURL -SourceUserID $SourceUserID -TargetUserID $TargetUserID

Accepted answer

0 additional answers

Your answer

Ling Zhou_MSFT 23,620 Reputation points Microsoft External Staff

2023-08-16T08:30:59.4966667+00:00

Hi @Tamir Giladi - Comoz Technologies,

Thank you for posting in this community.

I am sorry I don't quite understand your question. I can't find source email address and target email address in your picture. Can you describe to me in detail what these two email addresses are and how you want to copy the permissions?

Your time and patience is much appreciated. If there is any other assistance I can provide, please feel free to let me know.
Tamir Giladi - Comoz Technologies 40 Reputation points

2023-08-17T05:01:58.3633333+00:00

Hן @Ling Zhou_MSFT ,

My source email would be found on "user Email" column.

I have an example of a sctiprt that clones permissions. However it misses a lot so cloneing permissions from this csv file might be the ultimate solution for the misses permissions.

#Function to copy group memberships from one user to another Function Clone-SPOUserGroupPermission($SiteURL, $SourceUserID, $TargetUserID) { Try { #Get the Site collection $Site = Get-SPOSite $SiteURL #Get the Source user $SourceUser = Get-SPOUser -Site $Site -LoginName $SourceUserID #Get All groups of the source User $UserGroups = $SourceUser.Groups If($UserGroups.Count -gt 0) { Write-host -f Yellow "Found the User Member of $($UserGroups.Count) Group(s)..." #Loop through each group of the source user and add target user to that group ForEach ($Group in $UserGroups) { #Add Target User to the Group Add-SPOUser -Site $Site -LoginName $TargetUserID -Group $Group | out-null Write-Host -f Green "Added $TargetUserID to Group '$Group'" } } } Catch { Write-host $_.Exception.Message -f Red } } #SharePoint Online Admin Center URL $AdminCenterURL = "https://yourdomain-admin.sharepoint.com/" $SiteURL = "https://yourdomain.sharepoint.com/sites/sitename" $SourceUserID ="******@yourdomain.com" $TargetUserID ="******@yourdomain.com" #Connect to SharePoint Online Admin Center Connect-SPOService -Url $AdminCenterURL -Credential (Get-Credential) #Call the Function Clone-SPOUserGroupPermission -SiteURL $SiteURL -SourceUserID $SourceUserID -TargetUserID $TargetUserID

Answer 1

Ling Zhou_MSFT 23,620 Microsoft External Staff

Hi @Tamir Giladi - Comoz Technologies,

Thank you for posting in this community.

I think you want to copy the permissions of the source user on a site to the target user, including permissions for sites, lists, folders and items. Correct me if I have misunderstood.

If I understand correctly, adding the target user to the source user's group via a csv file doesn't exactly copy the permissions. You can refer to the script in this article to find all the permissions of the source user and copy them to the target user: How to Copy User Permissions in SharePoint Online using PowerShell?

Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Tamir Giladi - Comoz Technologies 40 Reputation points

2023-08-20T07:30:37.2233333+00:00

Hi @Ling Zhou_MSFT ,

Thanks.

I have already tried this script but unfortunately it doesn't work on broken inheritance folders.

Thats why i'm looking for another solution such as using a csv file.
Ling Zhou_MSFT 23,620 Reputation points Microsoft External Staff

2023-08-21T01:34:36.12+00:00

Hi @Tamir Giladi - Comoz Technologies,

Thank you for your reply.

However, I tested it on my end and it also copies permissions for folders that break inheritance. Perhaps did you notice that there are two methods called, one of which is set to scan the folder.
Tamir Giladi - Comoz Technologies 40 Reputation points

2023-08-22T04:31:34.5566667+00:00

Hi @Ling Zhou_MSFT ,

Yes, I didn't change the script but of setting the parameters for variables $SourceUser, $TargetUser, and $SiteURL.

On the attached picture, the 3 red arrows point on 3 folders that break inheritance.

The other 3 folders doesn't breake and are copied successfully.

We have in our site more than 800,000 files. If the -ScanFoIders $true -ScanFiIes $True, I suppose it should be taken longer than 20 seconds to finish, shouldn't it?
Ling Zhou_MSFT 23,620 Reputation points Microsoft External Staff

2023-08-24T06:48:56.12+00:00

Hi @Tamir Giladi - Comoz Technologies,

Apologies for the late reply!

If you want to copy the permissions of a folder that breaks inherited permissions, perhaps you have to set -ScanFoIders $true (and similarly for files that break inherited permissions, you have to set -ScanFiIes $True), and only then the special permissions of the folder or file will be obtained and copied to target users.

Although this results in longer copying times, it ensures that permissions are copied in full without omissions. If your file doesn't break inherited permissions, then you can set -ScanFiIes $False to reduce the time.
Tamir Giladi - Comoz Technologies 40 Reputation points

2023-08-27T08:41:04.1866667+00:00

Hi @Ling Zhou_MSFT ,
Now I realized my stupid mistake 🤦‍♂️

I run the code: Clone-PnPUser -SiteURL $SiteURL -SourceUserEmail $SourceUserEmail -TargetUserEmail $TargetUserEmail

instead of dropping the # in the code: Clone-PnPUser -SiteURL $SiteURL -SourceUserEmail $SourceUserEmail -TargetUserEmail $TargetUserEmail -ScanSubsites $true -ScanFolders $True -ScanFiles $True

Now it works 🙏

Thank you very much!

Share via

Clone Sharepoint Onilne Permissions using csv file

0 additional answers

Your answer