Odd Permission Page

%3CLINGO-SUB%20id%3D%22lingo-sub-1543370%22%20slang%3D%22en-US%22%3EOdd%20Permission%20Page%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1543370%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20have%20a%20user%20who%20has%20reported%20concerns%20about%20the%20following%20page%3A%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ehttps%3A%2F%2F%5Btenant%20name%5D-my.sharepoint.com%2F_layouts%2F15%2Fuser.aspx%3FshowLimitedAccessUsers%3Dtrue%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOn%20this%20page%20any%20user%20seems%20to%20be%20able%20to%20grant%20permissions%20and%20add%20permission%20levels.%26nbsp%3B%20Changes%20made%20are%20visible%20by%20all%20other%20users.%26nbsp%3B%20However%2C%20there%20is%20an%20oddity%20in%20the%20title%20which%20I%20highlighted%20on%20the%20attached%20image.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22uint32_0-1595582795049.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F207634i076FA7B308BEAF0B%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22uint32_0-1595582795049.png%22%20alt%3D%22uint32_0-1595582795049.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20do%20have%20some%20sensitive%20data%20being%20stored%20and%20this%20%22open%22%20permissions%20page%20has%20raised%20some%20concern.%26nbsp%3B%20Any%20suggestions%20or%20explanations%20of%20what%20is%20going%20on%20here%20would%20be%20appreciated.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1543370%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EPermissions%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESharePoint%20Online%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Highlighted
Occasional Contributor

We have a user who has reported concerns about the following page: 

 

https://[tenant name]-my.sharepoint.com/_layouts/15/user.aspx?showLimitedAccessUsers=true

 

On this page any user seems to be able to grant permissions and add permission levels.  Changes made are visible by all other users.  However, there is an oddity in the title which I highlighted on the attached image.

 

uint32_0-1595582795049.png

 

We do have some sensitive data being stored and this "open" permissions page has raised some concern.  Any suggestions or explanations of what is going on here would be appreciated.

 

Thanks.

0 Replies