SOLVED
Home

SPO Unique Permissions vs File Share permissions: How do they impact each other on migration?

%3CLINGO-SUB%20id%3D%22lingo-sub-1171183%22%20slang%3D%22en-US%22%3ESPO%20Unique%20Permissions%20vs%20File%20Share%20permissions%3A%20How%20do%20they%20impact%20each%20other%20on%20migration%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1171183%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3EI%20need%20to%20design%20a%20solution%20for%20migrating%20file%20shares%20to%20SharePoint%20Online.%20There%20are%20millions%20and%20millions%20of%20documents%20so%20I'm%20diving%20into%20Unique%20Permissions.%3C%2FP%3E%3CP%3ESPO%20has%20a%20limit%20of%2050.000%20unique%20permissions%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Foffice365%2Fservicedescriptions%2Fsharepoint-online-service-description%2Fsharepoint-online-limits%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Foffice365%2Fservicedescriptions%2Fsharepoint-online-service-description%2Fsharepoint-online-limits%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20want%20to%20know%20exactly%20how%20unique%20permissions%20work.%20I%20want%20to%20understand%20it%20so%20I%20can%20advise%20my%20customers.%3C%2FP%3E%3COL%3E%3CLI%3EWhat%20scenario%20on%20a%20file%20share%20will%20add%201%20to%20the%20unique%20permissions%20count%20for%20a%20document%20library%3F%3C%2FLI%3E%3CLI%3EHow%20can%20I%20check%20if%20the%20permissions%20on%20a%20file%20share%20will%20break%20this%20limit%20or%20in%20other%20words%3A%3COL%3E%3CLI%3Ehow%20can%20I%20count%20the%20unique%20permissions%20on%20a%20file%20share%3C%2FLI%3E%3C%2FOL%3E%3C%2FLI%3E%3CLI%3EWhen%20an%20Azure%20AD%20group%20with%2010%20AD%20Accounts%20in%20it%20causes%20a%20unique%20permission%20on%20a%20folder%20in%20SPO.%20Does%20this%20count%20for%201%20unique%20permission%2C%2010%20or%20something%20else%3F%3C%2FLI%3E%3C%2FOL%3E%3CP%3ESome%20extra%20information%3A%3C%2FP%3E%3CUL%3E%3CLI%3EWe%20need%20to%20migrate%20the%20current%20permissions%2C%20AD%20Groups%20and%20AD%20members%3C%2FLI%3E%3CLI%3EWe%20use%20ShareGate%20as%20a%20migration%20tool%3C%2FLI%3E%3C%2FUL%3E%3CP%3E%3CA%20href%3D%22mailto%3ATh%40nx%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3ETh%40nx%3C%2FA%3E%26nbsp%3Bin%20Advance!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1171183%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EPermissions%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESharePoint%20Online%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1171594%22%20slang%3D%22en-US%22%3ERe%3A%20SPO%20Unique%20Permissions%20vs%20File%20Share%20permissions%3A%20How%20do%20they%20impact%20each%20other%20on%20migration%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1171594%22%20slang%3D%22en-US%22%3EMy%202%20Cents%20here%3A%3CBR%20%2F%3E1.%20A%20unique%20permission%20will%20be%20added%20for%20each%20document%20migrated%20with%20a%20specific%20permission.%20The%2050.000%20limit%20is%20per%20document%20library%3CBR%20%2F%3E2.%20To%20count%20the%20unique%20permissions%20on%20a%20file%20share%20you%20will%20need%20to%20write%20some%20PS%20code%20or%20use%20a%20third%20party%20tool.%20There%20are%20some%20scritps%20on%20the%20Internet%20that%20you%20could%20use%3CBR%20%2F%3E3.%20Unique%20permissions%20count%20at%20the%20document%20%2F%20Filder%20level%20no%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1171643%22%20slang%3D%22en-US%22%3ERe%3A%20SPO%20Unique%20Permissions%20vs%20File%20Share%20permissions%3A%20How%20do%20they%20impact%20each%20other%20on%20migration%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1171643%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F60%22%20target%3D%22_blank%22%3E%40Juan%20Carlos%20Gonz%C3%A1lez%20Mart%C3%ADn%3C%2FA%3E%26nbsp%3BThnx%20for%20your%20reply!%3C%2FP%3E%3CP%3EI%20think%20you%20are%20correct.%20let%20me%20explain.%3C%2FP%3E%3CP%3EI've%20contacted%20several%20people%20and%20I%20think%20I%20have%20figured%20it%20out.%3C%2FP%3E%3CP%3EEvery%20element%20(folder%2Ffile)%20on%20your%20fileshare%20where%20'IsInherited%3DFalse'%20will%20count%20for%20a%20unique%20permission%20element.%3C%2FP%3E%3CP%3ESo%3A%3C%2FP%3E%3CP%3Ec%3A%5CTemp%3C%2FP%3E%3CP%3EThe%20AD%20Group%20DL-SEC-Temp%20is%20added%20to%20this%20folder%20with%20unique%20permissions.%3C%2FP%3E%3CP%3E10%20Accounts%20are%20member%20of%20the%20AD%20Group%20DL-SEC-Temp.%3C%2FP%3E%3CP%3EIf%20you%20migrate%20this%20folder%20to%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fcontoso.sharepoint.com%2Fsites%2Ftest%2FDocuments%2FTemp%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fcontoso.sharepoint.com%2Fsites%2Ftest%2FDocuments%2FTemp%3C%2FA%3E%3C%2FP%3E%3CP%3EThis%20folder%20will%20have%2010%20unique%20permissions.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAt%20least%20that%20is%20how%20I%20interpreted%20things.%26nbsp%3B%3C%2FP%3E%3CP%3EOne%20of%20my%20sources%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fwww.petri.com%2Fhow-to-get-ntfs-file-permissions-using-powershell%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.petri.com%2Fhow-to-get-ntfs-file-permissions-using-powershell%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

Hi,

I need to design a solution for migrating file shares to SharePoint Online. There are millions and millions of documents so I'm diving into Unique Permissions.

SPO has a limit of 50.000 unique permissions:

https://docs.microsoft.com/en-us/office365/servicedescriptions/sharepoint-online-service-description...

 

I want to know exactly how unique permissions work. I want to understand it so I can advise my customers.

  1. What scenario on a file share will add 1 to the unique permissions count for a document library?
  2. How can I check if the permissions on a file share will break this limit or in other words:
    1. how can I count the unique permissions on a file share
  3. When an Azure AD group with 10 AD Accounts in it causes a unique permission on a folder in SPO. Does this count for 1 unique permission, 10 or something else?

Some extra information:

  • We need to migrate the current permissions, AD Groups and AD members
  • We use ShareGate as a migration tool

Th@nx in Advance!

 

2 Replies
Highlighted
Solution
My 2 Cents here:
1. A unique permission will be added for each document migrated with a specific permission. The 50.000 limit is per document library
2. To count the unique permissions on a file share you will need to write some PS code or use a third party tool. There are some scritps on the Internet that you could use
3. Unique permissions count at the document / Filder level no
Highlighted

@Juan Carlos González Martín Thnx for your reply!

I think you are correct. let me explain.

I've contacted several people and I think I have figured it out.

Every element (folder/file) on your fileshare where 'IsInherited=False' will count for a unique permission element.

So:

c:\Temp

The AD Group DL-SEC-Temp is added to this folder with unique permissions.

10 Accounts are member of the AD Group DL-SEC-Temp.

If you migrate this folder to:

https://contoso.sharepoint.com/sites/test/Documents/Temp

This folder will have 10 unique permissions.

 

At least that is how I interpreted things. 

One of my sources:

https://www.petri.com/how-to-get-ntfs-file-permissions-using-powershell