Tracking Permission Changes

DeliverPoint provides two methods of tracking permission changes:

• 
  
  • Alerts. Similar to Alerts in SharePoint, the Alert Me option in DeliverPoint allows a user to track permission changes by email messages. From an infrastructure perspective, no special configuration is required for DeliverPoint Alert Me to send email messages. If users receive SharePoint Alert Me email notifications, then DeliverPoint Alert Me notifications should also work.
    
    
  • Permission Auditing reports.
  
  

To receive alerts or audit permission changes, you must first configure alert me or auditing in the DeliverPoint dashboard tree view and then use the Audit Permissions split button in the Common group on the Commands Ribbon. Subsequent pages in this documentation fully explain this process.

The permission changes that can be tracked are:

1. Associating or deassociating permission levels to users, Active Directory security groups and SharePoint groups.
   
   
2. Breaking or the restoration of permission inheritance.
   
   
3. Changes to SharePoint groups by adding or removing users or Active Directory security groups.
   
   
4. Deleting users or Active Directory security groups from a site collection.
   

These changes can be achieved using DeliverPoint, the out-of-the-box SharePoint web pages, Windows PowerShell or programmaticaly using the SharePoint APIs. Changes to permission levels are not tracked. For example, the creation of permission levels, the addition or removal of permissions to a permission level, and the management of permissions for a Web Application.

Note: The Alert Me and Audit functionality was first added to DeliverPoint version 15.10.5.