SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

In SharePoint 2010, when inheritence is broken for a subsite and a user is explicitly given permissions to that subsite, they then show up under http://sharepoint/sites/sitecollection/_layouts/user.aspx as a user with limited access.

I would like to be able to find out what site(s) these users have been given explicit access to within the site collection. The "Check Permissions" option will show what groups give them permissions, but not the (sub)sites that those permissions apply to.

Is there a way to see what sites a given user has been given explicit access to?

share|improve this question

Have you tried writing something in Powershell?

Gary Lapointe wrote a great blog post on how to do this with Powershell

share|improve this answer

Have a look at the article "Check User Permissions Programmatically in SharePoint 2010"


share|improve this answer

Third party tools like Deliverpoint from Lightning Tools can help with this. I'm sure DocAve and Axceler have offerings as well.

share|improve this answer

Try searching SUSHI in CodePlex. Its a good tool to fetch a data regarding to permission in a site

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.