In this video, we explore how to report on permissions from the perspective of a specific user. This includes Unique Permissions, OneDrive Sharing Links, and OneDrive Permissions.
DeliverPoint provides powerful user-centric reporting tools that allow administrators and site owners to gain deep insights into user permissions across SharePoint environments. This tutorial walks through how to use these reports effectively, including how to interpret results and take action where needed.
🔍 Accessing DeliverPoint
You can launch DeliverPoint either:
- From the DeliverPoint web part on a SharePoint page, or
- Via the DeliverPoint application directly.
Once inside, switch to the Tree View to visualize your site collections and define the scope of your reports. You can filter by object type—such as classic sites, hub sites, or Microsoft Teams—to narrow your focus.
👤 Running a Unique Permissions Report for a User
- Set the Scope: Start by selecting the site collection you want to analyze. You can also include multiple site collections for broader coverage.
- Search for a User: Enter the name of the user (e.g., “Demo User 4”) in the search bar.
- Generate the Report: From the Reports menu, choose Unique Permissions.
This report reveals:
- All direct and inherited permissions the user has.
- Group memberships, including SharePoint groups, Microsoft 365 groups, and nested Active Directory (AD) security groups.
- Permission levels at the site, list, and item levels.
- How the permissions were granted (directly or via group membership).
💡 Tip: Use the right-hand column to trace the permission path—whether direct or through nested groups.
🧹 Cleaning Up Direct Permissions
To remove direct permissions:
- Select the relevant rows in the report.
- Go to Account Management > Delete Permissions.
- Uncheck options to modify SharePoint or 365 groups if you only want to remove direct assignments.
- Enable rollback for safety, then run the deletion.
After refreshing the report, you’ll see a cleaner permission structure where access is granted only through groups.
🌐 Reporting Across Multiple Site Collections
You can expand your scope to include multiple site collections:
- Add additional scopes in Tree View.
- Run the Unique Permissions report again.
- DeliverPoint will process all lists, items, and groups across the selected scopes.
📁 Additional User-Centric Reports
1. OneDrive Permissions
Shows who has access to a user’s OneDrive files and folders, including permission levels.
2. OneDrive Sharing Links
Lists all sharing links created by the user, including recipients and access types. You can also revoke these links directly from the report.
3. Owned Site Collections
Displays all site collections managed by the current user. You can select one or more sites to run reports on them.
📥 Exporting Reports
Reports can be exported via the Actions menu.
🛠️ Troubleshooting Tips
- Only users with Full Control can see DeliverPoint options in SharePoint libraries.
- If reports are slow, consider narrowing the scope or using filters (e.g., by user or permission type).
- For large environments, use scheduled reports to automate delivery and prevent throttling.