Using DeliverPoint SPFx

DeliverPoint SPFx provides reporting and management of permissions within your Microsoft® SharePoint® Online Office 365™ tenant.

Once DeliverPoint SPFx has been added to your App Catalog, your sites will automatically have the DeliverPoint menu in the upper right hand corner.

This drop down menu will provide the following commands:

• DeliverPoint. Use this option to display the DeliverPoint Dashboard where you can manage permissions on any site in your SharePoint tenant (e.g. multiple scopes). By default the farm centric tree view of your SharePoint deployment is displayed.
  
  * Note. DeliverPoint is security trimmed so that those using it can only see information and perform DeliverPoint operations within their native scope of authority that is defined within SharePoint.

• Discover Permissions. Displays an easy to-read permissions report of the current site.

• Discover Permissions (Advanced). Displays a dialog winddow allowing you to pre-filter a report based on various criteria, such as Permissions Level or User name, and the type of permission (e.g. Full Control, Edit, Read).

*Although you can access the DeliverPoint Dashboard via the site menu, you may want to create a page and add the DeliverPoint client side web part in order to provide a central location for permission management and reporting. The web part will provide the DeliverPoint Dashboard as a web part, instead of a dialog window.

DeliverPoint SPFx allows you to manage and report on permissions at the following levels:

• Tenant
• Microsoft Teams
• Site Collection
• Site
• List/Library
• Item/File

Whether you are accessing the DeliverPoint Dashboard from the upper right hand corner menu, or via the web part, the Dashboard will consist of the following:

• Ribbon. This contains the commands to complete the following actions:
  
  
  • View
    
    
    • Farm Centric. Allows the user to set the scope for reporting by selecting one or more objects in the site structure, which is displayed via the Tree View.
      
      
    • Account Centric. Allows the user to search for a user account or security group, on which a report can be run against. This view is also used if the user wants to run a Unique Permissions report on a specific user account or SharePoint/security group.
      
      
  • Open When a scope is selected under the Farm Centric view, this will open the selected site or list.
    
    
  • Jobs. Displays a Jobs Pane that allows for the viewing and management of jobs, providing the opportunity to rollback if available.
    
    
  • Actions. Displays option for Account Management reports
    
    
    • Account Management Displays the following:
      
      
      • Copy Permissions. Allows the user to copy permissions from one object (source) to another (target). Copying amends permissions on the target object, and does not affect the existing permissions.
        
        
      • Transfer Permissions. Allows the user to select a scope, copy the permission set of an account (source) within that scope to other account(s) (target), and then the source account is deleted within the selected scope. This operation is a combination of the Copy Permissions and Delete Permissions commands.
        
        
      • Delete Permissions. Deletes an account’s permissions on an object.
        
        
      • Grant Permissions. Allows the user to grant permissions on one or more selected objects to a user account and/or SharePoint/security group, or combination of users and/or groups.
        
        
      • Revoke Permissions. Removes the permissions of an account or group by removing the account or group from a SharePoint group or unassigning a role.
        
        
  • Reports
    
    
    • Discover Permissions. Allows the user to find out who has access to a given object and how that access is given.
      
      
    • Discover Permissions (Advanced). Provides filter options to discover more specific permissions.
      
      
    • Unique Permissions. Via the Account Centric View, the user can run this report to find the locations where a specific user account or security group has been given explicit permissions to a site collection, site, list/library, folder or list item. In other words, where a user or group does not have its permissions inherited from the parent object.
      
      
• Management. This contains the Tree View and Results Panes.
  
  
  • Tree View pane. The tree view area displays the Microsoft Teams, site collections, the sites within the site collections, and the lists and libraries within each site that you have permissions to view. If you are a tenant administrator, you will see all the site collections in your tenant. Site owners will only be able to see sites they have access to manage. Selecting each SharePoint object will add a blue bar to the left of the scope, which identifies the object on which to complete the permission management task.

*Microsoft Teams sites will appear in the Tree View with a different icon to Site Collections.

• • Results pane. As you complete different DeliverPoint tasks, the results pane is used to display the results of those tasks. When you first display DeliverPoint, the result pane displays General information and the Tree View Legend.
    
    
    • General. Displays the version, and describes Farm and Account Centric views.
      
      
    • Tree View Legend. Displays a legend of the icons used in the tree view area.
      
      
    • Selected Scope. Displays the selected scope from the Tree View Pane.

List/Library and Item Permission Management

Once DeliverPoint SPFx has been added to the app catalog, you can complete DeliverPoint permission management tasks on lists/libraries and items/files. The DeliverPoint client side web part does not need to be added to a site in order to manage Lists and Libraries. Lists and libraries will display the DeliverPoint, Discover Permissions, and Discover Permissions Advanced links in the ribbon.