Technical knowledge center

SharePoint access and permission insights

Practical guidance for understanding, auditing and securing SharePoint Online permissions. Written for Microsoft 365 administrators, security architects and compliance auditors, and useful without buying anything.

Results appear below as you type.

Featured guideSharePoint Permissions11 min readintermediate

How to Find Out Why a User Has Access to a SharePoint Site

Trace direct, inherited and nested group access in SharePoint Online, from the role assignment on the resource down to the identity, using the admin UI, REST and PowerShell.

In this guide

  1. 1.How SharePoint decides whether a user has access
  2. 2.Step 1: Find the inheritance boundary
  3. 3.Step 2: List the role assignments on the boundary
PT

Access Witness Product Team

Published

Read the guide
Inspector panel for Alex Turner: Read through a group, why they have it, and how the access reaches them.
The inspector in the product: why Alex Turner can read FY2026 Budget.xlsx, and the path that gets him there. Sample Contoso Finance data.

Recent guides

Newest first. Every guide lists its published and updated dates.

  • Entra ID10 min read, intermediate

    SharePoint Groups vs Microsoft 365 Groups vs Entra ID Security Groups

    Three kinds of group grant SharePoint access and they behave differently for scope, nesting, ownership, guests and audit. Here is how each one works and how to tell them apart in a role assignment.

  • Historical Access12 min read, advanced

    How to Audit Historical SharePoint Permissions

    SharePoint keeps no permission history. This guide shows what the audit log can and cannot reconstruct, how to build a baseline plus event approach with PowerShell, and how to state confidence honestly.

  • Compliance & Audit10 min read, intermediate

    How to Investigate Who Changed SharePoint Permissions

    A step-by-step method for attributing a SharePoint Online permission change to an actor and a timestamp, reading the audit record, and reconstructing the before and after state.

  • Microsoft 365 Security9 min read, beginner

    How Long Does Microsoft 365 Keep SharePoint Audit History?

    Retention periods for the Unified Audit Log under Audit (Standard) and Audit (Premium), what the 10-year add-on covers, how audit delay works, and why none of it is a permission history.

  • External Sharing11 min read, intermediate

    How to Review External User and Guest Access in SharePoint Online

    Find every external identity with access to your SharePoint sites, the group or link that admits each one, and the tenant settings that decide what they can do, using Graph, SharePoint Online PowerShell and PnP.

Browse by topic

  • SharePoint Permissions

    Guides to SharePoint Online permission mechanics, inheritance and effective access.

    1 guide

  • Historical Access

    Point-in-time SharePoint access, audit history retention and reconstruction.

    1 guide

  • Microsoft 365 Security

    Microsoft 365 security guidance focused on SharePoint access and auditing.

    1 guide

  • Entra ID

    How Microsoft Entra ID groups and nesting affect SharePoint Online access.

    1 guide

  • External Sharing

    External user, guest and sharing-link governance for SharePoint Online.

    1 guide

  • Compliance & Audit

    Audit and compliance guidance for SharePoint Online access evidence.

    1 guide

Engineering dispatch

SharePoint permission and access-governance guidance, when there is something worth sending.

Technical walkthroughs only. No product announcements dressed up as guidance, no tracking pixels.

Newsletter signup coming soon.

Feeds: RSS 2.0 and JSON Feed, generated from published articles only.