show all users from all sites sharepoint 2013

Question

how can i show all user groups and members in SharePoint 2013?
I've just inherited our hosted SharePoint solution and I'm kind of stuck as far as management goes?
I'm in the ui panel but i don't see any thing helpful.

Answer

Hi @dirkdigs ,
I have implemented the below PowerShell script to list all the users across the site collections to list all the users with their group names iteratively.
Please replace site collection URL and run the following code with SharePoint 2013 management shell:

Add-PSSnapin Microsoft.SharePoint.PowerShell -ErrorAction SilentlyContinue  
   
$HTMLTemplate=@"  
  
  
  
  
    
  
  
  
  
"@  
   
#Function to get permissions of an object Sal. Such as: Web, List, Folder, ListItem  
Function Get-Permissions([Microsoft.SharePoint.SPRoleAssignmentCollection]$RoleAssignmentsCollection, $OutputReport)  
{  
   foreach($RoleAssignment in $RoleAssignmentsCollection)  
    {  
        #Get the Permissions assigned to Group/User  
        $UserPermissions=@()  
        foreach ($RoleDefinition in $RoleAssignment.RoleDefinitionBindings)  
        {  
            #Exclude "Limited Access" - We don't need it sal.  
            if($RoleDefinition.Name -ne "Limited Access")  
            {  
                $UserPermissions += $RoleDefinition.Name +";"  
            }     
        }  
           
        if($UserPermissions)  
        {  
            #*** Get  User/Group Name *****#  
            $UserGroupName=$RoleAssignment.Member.Name  
            $UserName=$RoleAssignment.Member.LoginName   
            #**** Get User/Group Type ***** Is it a User or Group (SharePoint/AD)?  
            #Is it a AD Domain Group?  
            If($RoleAssignment.Member.IsDomainGroup)  
                {  
                   $Type="Domain Group"  
                }  
            #Is it a SharePoint Group?             
            Elseif($RoleAssignment.Member.GetType() -eq [Microsoft.SharePoint.SPGroup])  
            {  
                 $Type="SharePoint Group"  
            }  
            #it a SharePoint User Account  
            else  
            {  
                   $Type="User"  
            }  
            #Send the Data to Report  
            "   $($UserGroupName)  $($Type)  $($UserName)   $($UserPermissions)" >> $OutputReport  
        }  
    }  
}  
   
Function Generate-PermissionRpt()  
{  
    Param([Parameter(Mandatory=$true)] [string]$SiteCollectionURL,  
          [Parameter(Mandatory=$true)] [string]$OutputReport,  
          [Parameter(Mandatory=$true)] [bool]$ScanFolders,  
          [Parameter(Mandatory=$true)] [bool]$ScanItemLevel)  
   
    #Try to Get the site collection   
    try  
    {  
        $Site = Get-SPSite $SiteCollectionURL -ErrorAction SilentlyContinue  
    }  
    catch  
    {  
        write-host Site Collection with URL:$SiteCollectionURL Does not Exists!  
        return  
    }    
       
    #Append the HTML File with CSS into the Output report  
    $Content = $HTMLTemplate > $OutputReport  
      
    " Site Collection Permission Report: $($Site.RootWeb.Title) " >> $OutputReport  
      
    #Table of Contents  
    " List of Sites " >> $OutputReport  
    #Get Users of All Webs : Loop throuh all Sub Sites  
    foreach($Web in $Site.AllWebs)  
    {  
           
        if($Web.HasUniqueRoleAssignments -eq $true)  
        {  
            $PermissionSetup ="Unique Permissions"  
        }  
        else  
        {  
            $PermissionSetup="Inheriting from Parent"  
        }  
           
        "" >> $OutputReport  
    }  
      
    #Site Collection Administrators Heading  
    "Site Name  URL  Permission Setup 
  $($web.Title)  $($web.URL)   $($PermissionSetup)

Site Collection Administrators" >> $OutputReport  
     "" >> $OutputReport  
    
    #Write Table Header  
    "" >> $OutputReport  
      
    #Get All Site Collection Administrators  
    $Site.RootWeb.SiteAdministrators | sort $_.Name | ForEach-Object {   
    " " >> $OutputReport  
    }  
   
    $Counter=0;  
    #Get Users of All Webs : Loop throuh all Sub Sites  
    foreach($Web in $Site.AllWebs)  
    {  
        Write-Progress -Activity "Collecting permissions data. Please wait..." -status "Processing Web: $($Web.URL)" -percentComplete ($Counter/$Site.AllWebs.count*100)  
       
        #Check if site is using Unique Permissions or Inheriting from its Parent Site!  
        if($Web.HasUniqueRoleAssignments -eq $true)  
        {  
            "User Account ID  User Name 
 $($_.LoginName)   $($_.Name)

 Site: $($Web.Title) is using Unique Permissions. " >> $OutputReport  
        }  
        else  
        {  
            "
 Site: $($Web.Title) is Inheriting Permissions from its Parent Site." >> $OutputReport  
        }  
      
        #Get the Users & Groups from site which has unique permissions - TOP sites always with Unique Permissions  
        if($Web.HasUniqueRoleAssignments -eq $True)  
        {         
            Write-host Processing Web $Web.URL  
            #*** Get all the users granted permissions DIRECTLY to the site ***  
            "Site Permissions" >> $OutputReport  
            "" >> $OutputReport  
   
            #Call the function to get Permissions Applied  
            Get-Permissions $Web.RoleAssignments $OutputReport  
           
                 
            #****** Get Members of Each Group at Web Level *********#  
            "Users/Groups   Type  User Name  Permissions

 " >>$OutputReport  
               
            #Check if any SharePoint Groups Exists, if yes, Get members of it  
            $WebGroupRoleAssignments = $Web.RoleAssignments | Where { $_.Member.GetType() -eq [Microsoft.SharePoint.SPGroup]}  
            if($WebGroupRoleAssignments)  
            {  
                "Group Users" >>$OutputReport  
                foreach($WebRoleAssignment in $WebGroupRoleAssignments)  
                {  
                    " " >> $OutputReport  
                    foreach($user in $WebRoleAssignment.member.users)  
                    {  
                        #Send the Data to Log file  
                        " " >> $OutputReport  
                    }  
                }  
            }  
        } #Web.HasUniqueRoleAssignments Over       
         
     #********  Check All List's Permissions ********/  
        foreach($List in $Web.lists)  
        {  
            #Skip the Hidden Lists  
            if( ($List.HasUniqueRoleAssignments -eq $True) -and  ($List.Hidden -eq $false))  
            {  
                "Group: $($WebRoleAssignment.Member.Name)
  $($user.Name)  $($user.LoginName)  $($user.Email)

List: [ $($List.Title) ] at $($List.ParentWeb.Url)/$($List.RootFolder.Url) is using Unique Permissions." >> $OutputReport  
                "" >> $OutputReport  
                      
                #Call the function to get Permissions Applied  
                Get-Permissions $List.RoleAssignments $OutputReport  
            }  
            "Users/Groups  Type  User Name  Permissions" >>$OutputReport  
               
            #********  Check Folders with Unique Permissions ********/  
            if($ScanFolders -eq $True)  
            {  
                $UniqueFolders = $List.Folders | where { $_.HasUniqueRoleAssignments -eq $True }      
                #Check if any folder has Unique Permission  
                if($UniqueFolders)  
                {  
                    #Get Folder permissions  
                    foreach($folder in $UniqueFolders)  
                    {  
                        #Write Table Headers  
                        $FolderURL=$folder.ParentList.ParentWeb.URL+"/"+$folder.Url  
                        "
Folder: $($Folder.Title) is using Unique Permissions." >> $OutputReport  
                        "" >> $OutputReport  
   
                        #Call the function to get Permissions Applied  
                        Get-Permissions $folder.RoleAssignments $OutputReport  
                           
                        "Users/Groups  Type  User Name  Permissions" >>$OutputReport  
                    }  
                }  
            }  
               
            #********  Check Items with Unique Permissions ********/  
            if($ScanItemLevel -eq $True)  
            {  
                $UniqueItems = $List.Items  | where { $_.HasUniqueRoleAssignments -eq $True }      
                #Check if any Item has Unique Permission Sal  
                if($UniqueItems)  
                {  
                    #Get Folder permissions  
                    foreach($Item in $UniqueItems)  
                    {  
                        #Get Item's Name if Title is NULL  
                        if($Item.Title -ne $null) {$ItemTitle = $Item.Title } else {$ItemTitle= $Item["Name"] }  
                        #Write Table Headers  
                        $ItemURL= $item.ParentList.ParentWeb.Site.MakeFullUrl($item.ParentList.DefaultDisplayFormUrl)  
                        "
Item: $($ItemTitle) in list/library $($List.Title)  is using Unique Permissions." >> $OutputReport  
                        "" >> $OutputReport  
   
                        #Call the function to get Permissions Applied  
                        Get-Permissions $Item.RoleAssignments $OutputReport  
                           
                        "Users/Groups  Type  User Name  Permissions" >>$OutputReport  
                    }  
                }  
            }  
        } #List  
    $Counter=$Counter+1;         
    } #Web  
"" >>$OutputReport  
Write-host "`n Permission report generated successfully at "$OutputReport  
   
}  
   
#**********Configuration Variables************  
$OutputReport = "C:\PermissionRpt.htm"  
$SiteCollURL="https://xxx"  
$ScanFolders=$False  
$ScanItemLevel=$False  
   
#Call the function to Get Permissions Report  
Generate-PermissionRpt $SiteCollURL $OutputReport $ScanFolders $ScanItemLevel

The result of running is as follows:

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

show all users from all sites sharepoint 2013

1 answer