Forum Discussion
Get SharePoint Groups or Security Groups and Permissions for each Sub Web.
It works --->
Connect-PnPOnline - <<Give details here>>
$context.Load($context.Web.RoleAssignments)
$context.Load($context.Web.RoleAssignments.Groups)
Invoke-PnPQuery -ErrorAction Stop
ForEach($group in $context.Web.RoleAssignments.Groups)
{
$context.Load($group)
Invoke-PnPQuery -ErrorAction Stop
$perm = Get-PnPGroupPermissions -Identity $group.Title
if($perm.Name.Count -gt 0) {
for($i=0; $i -lt $perm.Count;$i++){
Set-PnPGroup -Identity $group.Title -RemoveRole $perm[$i].Name
}
Set-PnPGroup -Identity $group.Title -AddRole "Read"
}
Hi,
You can try similar script from technet gallery
https://gallery.technet.microsoft.com/Get-SharePoint-Online-and-7e6afce2
Hi
Sorry for the delayed response but I seem to have stumbled upon a issue in both the link you mentioned and in my orignal code, when trying to evaluate groups per web. I will illustrate what I mean:
1) First I get a list of sub webs in my Intranet
Connect-PnPOnline $webUrl -Credentials $cred $subwebs=Get-PNPSubWebs
2) Now I want to iterate though my list of sub webs and get all groups aka site permissions
foreach($subweb in $subwebs)
{
Connect-PnPOnline $subWeb.Url -Credentials $cred
# just doing one more check to see we are actually on the correct sub site
$thisWeb = Get-PnPWeb
$groups=Get-PNPGroup -Identity $thisWeb.Title
In theory, it should provide me with only the groups in my current web. Acurally it shows me all the Site Groups, regardless of what web I am connected to.
Again, getting the owner/member/visitor groups will bring back only appropriate role groups at the top level site. Also if you have multiple owner/member/visitor groups assigned ot the current web; these are ignored, just the first for each role is returned.
$ownerGroup = (Get-pnpweb -Includes AssociatedOwnerGroup).AssociatedOwnerGroup $memberGroup = (Get-pnpweb -Includes AssociatedMemberGroup).AssociatedMemberGroup $vistorGroup = (Get-pnpweb -Includes AssociatedVisitorGroup).AssociatedVisitorGroup
If I can't resolve this I think I will have to use csom ;-(
Hi Daniel
I have fallen over the same problem when I use Get-PnPGroup I get all of the groups in the site collection whereas I just want the groups for a particular web / subweb.
Is this a bug in Get-PnPGroup ?
@ErwinVanHuen @VesaJuvenon
- Nigel
Yep, been there. My advice is to install the excellent audit tool... I can't remember the exact name but it has droid in the name.. You run it from localhost on your laptop. I asked them to include support for groups assigned to a Web.. They said that was in development. You can export to. CSV. Can discuss later but I am on a beach in Wales!It's AdminDroid. You can check out the interactive demo http://demo.admindroid.com.
