We have a multitude of sites and sub-sites in SharePoint. As we run Azure AD Connect, we are able to assign Windows security group as Site Collection Administrators and further - assign AD groups to SharePoint groups, so we only need amends on AD side when anybody needs a change of permissions.
My plan is to:
- Reset any permissions granted so far on all sites and subsites
- Map AD groups to SharePoint groups for each site
- Break inheritance on document libraries and disable site visitors from having read access on it
Due to the number of sites I would really like to do it via PowerShell to avoid any human error.
Being fairly new to Sharepoint business, I can see very limited set of cmdlets for Sharepoint online available through Sharepoint Online Shell (released 9 June 2016), and can't wrap my head around the solution using only this set.
I'll gladly accept an answer listing cmdlets\methods needed for getting subsites, libraries, lists and amending permissions for them.