Discover Permissions

‘Discover who has permissions to this SharePoint object’

Discover Permissions allows the user to find out who has access to a given object and how that access is given.

*Note: Discover Permissions is mostly a real-time feature. If an account is assigned a new permission level to an object, the account will be found immediately in the Discover Permissions report for the object. The only exception is when an Active Directory group, which has not been crawled by the Authentication Store Interrogation timer job, is added to an object. The membership for the group will not be known until the group has been crawled.

You can only use the Discover Permissions DeliverPoint action if you have the SPBasePermission Enumerate permission. That is, only users who have access to view permissions in SharePoint can access this DeliverPoint action. For example, users who are mapped to a permission level that includes the Manage Permissions right, such as, Full Control, will be able to use this action.

There are three forms of the Discover Permissions DeliverPoint action:

• Discover Site Permissions
• Discover List Permissions
• Discover Item Permissions
  

All three forms of this DeliverPoint action uses the Discover Permissions results page, which you can use to filter the results. The Discover Permissions results page and how to filter the results are explained in the next sections. You can also add a column to a list / library, based on the DeliverPoint inheritance field, to display the folder or list item file permission inheritance in views.

Discover Site Permissions

To use the Discover Site Permissions action, complete either option of steps:

Option 1

1. In the browser, navigate to the SharePoint site where you want to complete the action, click Settings , and click Discover Site Permissions to open the Discover Permissions results page.

Option 2

1. Navigate to the DeliverPoint dashboard and using the View Ribbon tab, click either Farm Centric or Account Centric.
   
   
2. In the tree view, select those nodes, also known as SharePoint objects, to be included in the scope, for example, one or more site collections or sites.

*The Discover Permissions command cannot be completed on accounts.

*Child nodes are not automatically included.

3. On the Commands Ribbon tab, click Discover Permissions in the Common group.
   
   

*If you have a small screen resolution or window size, the commands in the Common group are available from the Common split button.

4. Clicking Discover Permissions displays two options: Discover All Permissions (Advanced) or Scheduled Discover Permissions
   
   
   1. Choose Discover All Permissions if you want to run a Discover Permissions report immediately.
      
      
      1. A dialog box is displayed that allows you to specify your criteria to be included in the Discover Permissions report.
         
         
      2. After specifying the necessary criteria, select Generate.
         
         
   2. Choose Schedule Discover Permissions if you want to select a date and time for a one-off report, or schedule recurring reports.
      
      
      1. A dialog box is displayed that allows you to specify your criteria to be included in the Discover Permissions report.
         
         
      2. After specifying the necessary criteria, select Schedule.
         
         
      3. The Schedule Discover Permission Report dialog box appears. Enter the following criteria:
         
         
         1. Folder Path – the URL path to the document library where the report will be created (e.g. https://intranet/sites/LT/shared%20documents)
         2. File Name Pattern – the pattern for generating the report file name (the default is ‘Discover_Permissions_[MM].[dd].[yyyy]_[HH].[mm].[ss]_[USER]’)
         3. Schedule – the recurring schedule when the report is to be generated
         4. Options – check box for ‘Generate Once’ if the report is a one time only report
            
            
      4. Click Save.

*To remove a schedule, click Schedule on the Commands Ribbon tab, and then at the bottom of the Schedule Discover Permissions Report dialog, click Clear.

5. The Discover Permissions results page is displayed. (If you chose a Scheduled report, you will be taken back to the DeliverPoint Dashboard.)

← Go to top of section

Discover List Permissions

To use the Discover Lists Permissions action, complete either option of steps:

Option 1

1. If the DeliverPoint Configuration Tree View Settings are set to display lists and libraries, on the DeliverPoint dashboard, select one or more lists or libraries to be included in the scope.
   
   
2. On the Commands Ribbon tab, click Discover Permissions in the Common group, and then Discover All Permissions

Option 2

1. Navigate to the list where you want to Discover Permissions.
   
   
2. On the DeliverPoint Ribbon tab, click Discover Permissions in the List Permissions group, and then Discover All Permissions (Advanced).
   
   

*If you want to schedule the report, select Schedule Discover Permissions, as explained previously under Option 2, Step 4.b. of the Discover Site Permissions steps above.

*When you have a small screen resolution the commands in the List Permissions group are available from the List Permissions split button.

3. A dialog box appears, allowing you to pre-filter your results. After defining the filter criteria, click Generate
   
   
   
   The Discover Permissions results page is displayed.
   
   

*Information on the Unique Items command on the DeliverPoint Ribbon tab, can be found in the Unique List Items Detection section later in this documentation.

← Go to top of section

Discover folder or item Permissions

To use the Discover Permissions action on a folder, list item or file, complete the following steps:

1. Navigate to the list where you want to use the DeliverPoint Discover Permissions command.
   
   
2. Click to the left of the folder, list item or file (1), and then on the DeliverPoint Ribbon tab, click Discover Permissions in the Item Permissions group (2), and then Discover All Permissions (Advanced) (3).
   
   
   

*If you want to schedule the report, select Schedule Discover Permissions, as explained previously under Option 2, Step 4.b. of the Discover Site Permissions steps above.

3. A dialog box appears, allowing you to pre-filter your results. After defining the filter criteria, click Generate
   
   
   
   The Discover Permissions results page is displayed.

← Go to top of section