Is there an easy method in a SharePoint 2013 Online or on-premise instance to quickly identify all sites and libraries with direct permissions? I'm trying to enforce groups wherever I can but site owners continue to add permissions directly. Hoping to find a way I can monitor this to help curb the behaviour.
SharePoint comes with Auditing feature, which helps in identifying all such activities. You need to configure auditing in your environment. If you had already configured Audit for site collection you can follow follow the below steps.
- Click on gear icon, and select
Site Settingsfrom the drop down menu.
- Now under site collection administrator section, find
Audit Log Reports. Click on it, it will open a page.
- Now under
Security and Site Settings Reportselect
- Follow the on screen instruction to fill the location of report. Hit
Okand you are done.
The report will be available in destination library you selected. The report will contain information regarding, permission on site and specific list and lib. Also it will show the data like who added/deleted/modified permission and when.
To configure audit logs follow below steps:
- Click on gear icon and select
- Under site collection administrator section find
Site collection audit settings. Click on it will open a page.
- In setting page, configure log trimming (if you want) this will remove past log data specified in numbers. Under
List, Library and Sitecheck the
Editing users and permissions. This will start logging permission data.
Follow the URL to learn more on Auditing. https://support.office.com/en-us/article/configure-audit-settings-for-a-site-collection-a9920c97-38c0-44f2-8bcb-4cf1e2ae22d2
This is a good way to check Site collection wise.
If you are looking for entire farm, then you night need to consider writing some PowerShell code in order to get the data from all site collection/web applications.