Forum Discussion
Solving the "who can see my stuff" question?
We are using SharePoint Online and have used Active Directory groups to secure site collections, sites and sometimes libraries.
A common question I'm getting from content owners is, "Who can see my stuff?" Or "who can see this document". Now I can direct them to the Share - Shared With dialog on the content, but for AD groups, its pretty useless frankly as all they get is a list of AD groups with no clue who is in those groups.
I'm curious if others have seen this as a requirement from their user base and if there are any potential solutions out there?
6 Replies
- Guy JohnsonIron Contributor
We controlled out SharePoint Online differently. I didn't use the AD groups but created new ones that worked better. The reason for this was that some users weren't in the proper AD groups for access to Team Site/Libraries.
Very simple to create any new groups needed.
A little extra work at the beginning but manageble.
- JaredMatfessIron Contributor
Throwing it out there - this might be a good candidate for a user voice recommendation. I can definitely see my clients benefiting from being able to do proper reporting on a file to understand the users that have access.
O365 User Voice:
https://office365.uservoice.com/
- Katie PegoraroBrass Contributor
Yes, this is a problem for us, too.
I think moving to O365 Groups instead of AD groups is the "way forward" answer, but it doesn't help the "now" problem.
- Bradley LiebenbergBrass Contributor
The Permissions checker will tell you what access someone has at a site or document library level , unfortunatley it will not say if an individual document has been shared in a document library or what document it is, all you will see is that the person has "Limited access" if a document has been shared someone where in a library.
- Richard BourkeIron ContributorThanks Bradley. Unfortunately most of our content owners have contributor access so this is not available to them.
- Unfortunately the only way in the box to get this information by end users is just the one you have described :-(...if this is not enough, then you will need to develop something or use a third party tool