SharePoint Online overview of user permissions

Here's one I have which will get you started. I can't remember where I found it. And I'm a Powershell newbie so I won't be able to help!

I use Windows Powershell ISE for running scripts which is more user friendly for me.

https://msdn.microsoft.com/en-us/powershell/scripting/getting-started/fundamental/windows-powershell-integrated-scripting-environment--ise-

Connect to SPO and then run this. It will generate a CSV file with users and permissions for a site collection. However the CSV needs work to make it readable as all the data is in one column but text to columns sorts that.

Note you have to create a folder called 'exports' on your C drive. Or change the path in the script. Depending on the number of site and users, it will take a few minutes to run.

Otherwise it's 3rd party tools like ShareGate or Clouldkit365.

function Get-SiteCollectionGroups {
Param(
[Parameter(Mandatory=$true)]
[ValidateNotNull()]
[string]$outputFullFilePath,
[Parameter(Mandatory=$false)]
[switch]$selectSites,
[Parameter(Mandatory=$false)]
[char]$csvSeparator = ';',
[Parameter(Mandatory=$false)]
[char]$internalSeparator = ','
)
Write-Host "Collecting site collection groups";
$SiteCollectionGroups = @();
$sites = $null;
if($selectSites)
{
$sites = Get-SPOSite -Detailed | Out-GridView -Title "Select site collections to collect groups from" -PassThru;
}
else
{
$sites = Get-SPOSite -Detailed;
}
[int]$counter = 0;
[int]$total = $sites.Count;
[string]$counterFormat = "0" * $total.ToString().Length;
foreach($site in $sites)
{
$counter++;
Write-Host "$($counter.ToString($counterFormat))/$($total.ToString($counterFormat)) [" -ForegroundColor Yellow -NoNewline;
Write-Host "$($site.Url)" -ForegroundColor Cyan -NoNewline;
Write-Host "]: " -ForegroundColor Yellow -NoNewline;
try {
$groups = Get-SPOSiteGroup -Site $site;
foreach($group in $groups)
{
[string]$groupUsers = "";
foreach($user in $group.Users)
{
$groupUsers += "$user$($internalSeparator)";
}
if($groupUsers -match "$($internalSeparator)$")
{
$groupUsers = $groupUsers.Substring(0, $groupUsers.Length-1);
}
[string]$groupRoles = "";
foreach($role in $group.Roles)
{
$groupRoles += "$role$($internalSeparator)";
}
if($groupRoles -match "$($internalSeparator)$")
{
$groupRoles = $groupRoles.Substring(0, $groupRoles.Length-1);
}
$group | Add-Member -MemberType NoteProperty -Name "SiteCollectionUrl" -Value $site.Url
$group | Add-Member -MemberType NoteProperty -Name "GroupUsers" -Value $groupUsers
$group | Add-Member -MemberType NoteProperty -Name "GroupRoles" -Value $groupRoles
$SiteCollectionGroups += $group;
}
Write-Host "$($groups.Count) groups are successfully collected" -ForegroundColor Green;
}
catch
{
Write-Host "Groups could not be collected" -ForegroundColor Red;
}
}
$SiteCollectionGroups | Select SiteCollectionUrl,LoginName,Title,OwnerLoginName,OwnerTitle,GroupUsers,GroupRoles | Export-Csv -Path $outputFullFilePath -Delimiter $csvSeparator -NoTypeInformation
Write-Host "Site collection groups are collected and written to $outputFullFilePath" -ForegroundColor Green
}
# 2 examples, the first is a minimal call, the second is a call with all optional parameters
Get-SiteCollectionGroups -outputFullFilePath "C:\exports\AllSiteCollectionGroups$(Get-Date -Format "yyyyMMddhhmmss").csv"
#Get-SiteCollectionGroups -outputFullFilePath "C:\exports\AllSiteCollectionGroups$(Get-Date -Format "yyyyMMddhhmmss").csv" -csvSeparator ',' -internalSeparator ';' -selectSites