Forum Discussion
Daceaton
Oct 01, 2020Copper Contributor
SahrePoint permission Audit27001
Dear community, I'm looking for an option in the Office365 Admin Center for an extract for an audit, which I can present to the auditor to prove the permissions. I would also like to receive a good s...
SeanMcAvinue
Oct 02, 2020MVP
Are you looking to audit data or activity? If activity then is it user or admin?
Either way, you'll find the tools in the security and compliance center. With eDiscovery cases for Data or audit logs for activity.
Either way, you'll find the tools in the security and compliance center. With eDiscovery cases for Data or audit logs for activity.
Daceaton
Oct 03, 2020Copper Contributor
I am an administrator and would like to have a permissions statement from sharepoint to present to the auditor. I see the tool in the eDiscovery cannot help me with this. I might need you to write a script
- SeanMcAvinueOct 03, 2020MVPAh I see, I misread your original post, would you like to audit permission on all folders or document libraries? Graph API is your best bet for that.
- DaceatonOct 03, 2020Copper ContributorYes, preferably also about the graph. Can you show me how exactly I can implement this? Would be a dream
- SeanMcAvinueOct 03, 2020MVPUnfortunately it would take some knowledge of Graph to even set up your environment for it, an app registration etc..
The exact call you're looking for is here: https://docs.microsoft.com/en-us/graph/api/permission-get?view=graph-rest-1.0&tabs=http
If you haven't used Graph before I recommend testing on Graph Explorer: https://developer.microsoft.com/en-us/graph/graph-explorer
If you don't have a whole lot of dev experience I'd recommend using PowerShell Invoke-WebRequest for your calls.
https://www.thelazyadministrator.com/2019/07/22/connect-and-navigate-the-microsoft-graph-api-with-powershell/