User permissions in whole Sharepoint tree

Luis Olias 206 Reputation points
2020-09-28T12:00:51.373+00:00

Hello,

I am new to Sharepoint and was wondering if there is a way to know a certain user's permissions in the whole Sharepoint tree.

For instance, to know that "user1" is a contributor in Site1, a reader in Site2, and so forth.

Many thanks in advance,

Microsoft 365 and Office | SharePoint | For business | Windows
0 comments No comments
{count} votes

Accepted answer
  1. Allen Xu_MSFT 13,866 Reputation points
    2020-09-29T05:55:42.047+00:00

    Hi @Luis Olias ,

    To check user’s permission in a site, please click the settings button in the upper right corner of the webpage->Site permissions->Advanced permissions settings:
    29036-929-5.png
    28998-929-2.png

    You will redirect to this page:
    28938-111.png

    Click “Check Permissions” in the ribbon:
    28999-929-3.png

    Enter username in the text box:
    28939-222.png

    For Example, If I want to check a user whose user name is “Allen Xu”, enter “Allen Xu” in the box and then click “Check Now”:
    28945-929-4.png

    Now you can check the permission level given to the user:
    28940-929-6.png

    =====Updated=====
    There are not out-of-box methods in SharePoint Online to check user permission a whole SharePoint Online Site Collection.

    As a workaround, you can use PowerShell cmdlets to list a certain user’s permission in a whole SharePoint site collection and export them into a CSV file.

    I attached the PowerShell cmdlets in the attachment, you can have a try.29377-ps.txt

    There are a few points you need to pay attention to:
    1.In this Section:
    29423-1.png

    Replace $SiteURL with your own site’s URL;
    Replace $UserAccount with your own site collection admin account;
    Replace $ReportFile with the CSV file location you created in advance;

    2.It will pop up prompt box when you are running the script:
    29424-2.png

    Type in the site collection administrator’s name and password.

    3.The report will be saved in the location you pointed in $ReportFile, open it and now you can see the all permissions the certain user has:
    29425-3.png
    29388-ps1.png

    If you are still confused about this, please feel free to let me know.


    If an Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    2 people found this answer helpful.

1 additional answer

Sort by: Most helpful
  1. Luis Olias 206 Reputation points
    2020-09-30T06:56:17.737+00:00

    Hello @Allen Xu_MSFT ,

    I really appreciate the time you took for those screenshots.

    My question was aimed for the whole site, meaning:

    What permissions has "user1" in Site1, Site2, Site3 ?

    Sort of a whole report for any given user.

    Anyway, I am really thankful for your help.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.