DeliverPoint for SharePoint On-Premises

DeliverPoint is an in-context Microsoft® SharePoint® Permissions Management Tool that enables SharePoint farm administrators, site collection administrators and site owners to effectively manage SharePoint permissions within the context of a SharePoint 2013 and 2016 on-premises environment.

This page contains a link to a recorded webcast, the benefits of using DeliverPoint and an overview of the key features. To learn how to deploy, use or troubleshoot DeliverPoint, click on the following links:

• Deploying DeliverPoint
• Permission Management
• Troubleshooting DeliverPoint
  

For updated DeliverPoint On-Premises training videos and walkthroughs, please see DeliverPoint On-Premises training videos on the Lightning Tools website.

Benefits

• Provides permissions management to the business user.
• Provides confidence.
• Cleans up the permissions mess.
• Support for Microsoft® SharePoint® 2007, 2010, 2013, 2016.

DeliverPoint Features

• Discover where user or group accounts have unique permissions throughout your farm down to the list item level.
• Schedule discovery reports
• Specify:
  • A DeliverPoint operator to manage permissions on any site regardless of their permissions to a SharePoint object
  • A Permission Auditor
• Discover who in your farm has permissions on any given securable object.
• Discover lists throughout your farm with unique permissions and use the DeliverPoint Inheritance Field to display a permission inheritance indicator in list / library views.
• Discover list items with unique permissions.
• Copy / transfer / delete user, Active Directory group, or SharePoint group permissions.
• Grant user or group permissions.
• Reassign one user group with another user group.
• Monitor farm growth – limited to DeliverPoint permissions operators & site collection administrators.
• Identify and remove dead accounts within your farm.
• Clone site and list permissions.
• Compare site permissions.
• Email a person with permission change information or produce audit reports.

These operations can be executed at the following levels:

• Farm
• Web Application
• Managed path
• Site collection
• Individual site (web)
• List / Library
• Folder / List Item / File
  

The operations you choose affect all permissions for the targeted account resource in scope. For example, let’s say you select “Copy Permissions” at the Managed Path level. Since all site collections within the Managed Path are part of the inheritance chain, they are said to be in scope. Site collections that exist under different Managed Paths would not be in scope because they are not part of the first Managed Path’s inheritance chain. It is important to know which objects are in scope for every operation you execute using DeliverPoint. For example, if you select to “Delete Permissions” at the Farm level, then all Web Applications, Managed Paths, site collections, sites (webs), lists, list items and folders are in scope for this action. Be sure to target the execution of permissions at the intended level of inheritance so you don’t change permissions for a user on the wrong or unintended objects.

*Note DeliverPoint is security trimmed so that those using it can only see information and perform DeliverPoint operations within their native scope of authority that is defined within SharePoint. That being said, it is still important to be certain of the desired scope in which to perform an operation so that unwanted changes do not occur. The Copy, Delete, and Transfer Permissions operations are effective on the following objects:
* Farm
* Web Application
* Managed paths
* Site collections
* Sites (webs)
* Lists
* List items and folders

The Copy, Delete, and Transfer Permission actions can use Active Directory user or group accounts along with Forms Based Authenticated users and Claims Based Authenticated users. You cannot copy a SharePoint group’s permissions. Instead, you can copy any account within a SharePoint group to any other account, whether it’s in a SharePoint group or not. In addition, DeliverPoint gives you introductory statistics on your farm, allowing you to understand the aggregate total, age and size of web applications, managed paths, site collections, webs, and lists within your farm. Using DeliverPoint, you can objectively define the following terms as they relate to the aforementioned objects:

• Small
• Medium
• Large
• New
• Aging
• Old
  

These terms can then be used to segment your farm, web application, managed path, site collection, or web’s statistical information. For example, you can define that a “large” list is a list that has over 200 MB of information or that a list that is older than 105 days is “aging”. Once defined, DeliverPoint tells you how many “large” and “aging” lists you have at any scope within your farm. You can view size and aging information for any object as previously described.