We have dozen of users with full permissions in one of document libraries.
Somebody is changing user permissions on document/item level occasionally.
Is it possible to see somewhere in logs or anywhere/anyhow who is doing it?

exp. There are 4 office docs in library and they are all inheriting permissions from parent, document library. From time to time, one or two documents are set to unique permissions with some groups removed.

2 Answers 2


You can check it if Auditing on the Site collection is enabled. Otherwise it is very hard to find, because you have to dig into the ULS logs and IIS logs to get the clue.You can check it if it enabled and user permission auditing is checked.

Go to Site settings> Site Collection Administration> select Site collection audit settings and on this page make Sure Editing users and permissions is selected.

to view the report Site settings> Site Collection Administration> Audit log reports You will see the security Settings report. open it and examine.

Configure audit settings for a site collection

  • thank you very much on your reply. but I didn't find actions that would solve question who edited permissions. note: Auditing was already enabled so it's not that.
    – Danilo
    Dec 27, 2016 at 7:34
  • After another filter, colleague found what I was looking for. Thanks
    – Danilo
    Dec 27, 2016 at 9:26

Please check out this article.. https://community.spiceworks.com/how_to/125875-how-to-find-permission-changes-in-sharepoint-2013-site-collection


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.