In SharePoint 2010, when inheritence is broken for a subsite and a user is explicitly given permissions to that subsite, they then show up under http://sharepoint/sites/sitecollection/_layouts/user.aspx as a user with limited access.

I would like to be able to find out what site(s) these users have been given explicit access to within the site collection. The "Check Permissions" option will show what groups give them permissions, but not the (sub)sites that those permissions apply to.

Is there a way to see what sites a given user has been given explicit access to?

4 Answers 4


Have you tried writing something in Powershell?

Gary Lapointe wrote a great blog post on how to do this with Powershell



Have a look at the article "Check User Permissions Programmatically in SharePoint 2010"

at http://tad.co.in/?p=748


Third party tools like Deliverpoint from Lightning Tools can help with this. I'm sure DocAve and Axceler have offerings as well.


Try searching SUSHI in CodePlex. Its a good tool to fetch a data regarding to permission in a site

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.