Forum Discussion
SharePoint and Groups
Team, Is there any place to see all SharePoint sites that a O365 group is assigned or associated with? There are multiple reason for this question. We are migrating over from Windows AD to AAD ...
JamesRV Not out of the box. But with PnP PowerShell it should be possible.
- Receive all sites from your tenant.
- Loop through all sites and check the HiddenUserList (Get-PnPUser). If the AD group is listed you know the group was added in the past. Don't forget, if permissions are removed from a site the item in the HiddenUserList is not deleted. So you have to double check whether the item still has permissions.
- The result includes also information whether the item has permissions on the site.
Thank you this is helpful and we are currently working on a similar approach with PS scripts. Your input will be valuable too.
We have 1000's SP sites and the script is going to spin for a while. I will post back on the result.
I was hoping there is a hidden capability 😞 as this could a key information on where are all a group is used without this a key component of Security access review is missing. Someone from SP or AAD security team can take this as a feature request?