SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Similar to this question is there a similar way to look up permissions for a given user or AD Group? SharePoint 2007 really doesn't work in PowerShell and the Internet didn't yield much here.

share|improve this question
up vote 1 down vote accepted

SharePoint SUSHI (SharePoint Utility with a Smart, Helpful Interface) is a free administrative tool for SharePoint that among other tasks, will list the permissions a user or AD group has within an entire site collection (the screenshot on the main page shows this functionality).

Disclosure: I have no affiliation with SUSHI but I have used it specifically to find out permissions for some users.

share|improve this answer

You can get information via PowerShell in MOSS 2007. The script from this site will traverse a site and give you groups and permissions.

To quote form the site, it will:

Recursively crawl a site or entire web application within SharePoint Enumerate permissions assigned to a SharePoint site Detail the SharePoint users assigned to a SharePoint group Determine if an Active Directory group is a member of a SharePoint group Detail the Active Directory users who are members of an Active Directory group Search for a specific user’s permissions on a SharePoint site

share|improve this answer

The SharePoint Admin Toolkit has some features that help tracking down user permissions within the SharePoint interface. We have it installed and it definitely helps track down why people might get access denied errors due to permissions and comparing permission sets.

share|improve this answer

Checkout SharePoint Permissions Manager which gives a quick view of all the permissions for the group/user within the site.

share|improve this answer
Negative, this tool does not do AD Users or groups only SharePoint groups, used already – tekiegreg Dec 8 '11 at 15:46
Maybe I misunderstood the question. I believed, the users and AD group permissions you are talking about, are the users and groups from AD directly added into your SharePoint site within SharePoint groups. Moreover the link, you provided was speaking about permissions in site and site collections. So I came to that conclusion. Anyway, good to know, you got the right solution. – Deepu Nair Dec 9 '11 at 4:57

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.