permission-report

Permission Report

When to use

Use this skill when the user wants a read-only review of who has access to SharePoint files, folders, libraries, lists, or a site, especially requests such as “who has access,” “permission report,” “sharing report,” “access review,” or “review permissions.”

Inputs

Use the current SharePoint context by default. Determine the reporting scope from the user’s request and available context:

• Selected files or folders, if the user has selected items or says “these/this.”
• A named library or list, if the user names one.
• The whole current site, if no narrower scope is provided.

Only report content and permission details the current user can already see. Never invent access data.

Steps

1. Stay strictly read-only on permissions.

   • Never grant, revoke, change, break, restore, or otherwise modify sharing or permissions.
   • Do not create sharing links or invite users.
   • Use only discovery, listing, permission-checking, and file-creation tools needed to produce the report.

2. Resolve the scope.

   • If items are selected, report on those selected files or folders.
   • If a list or library is named, resolve it from the current site and report on that list/library and representative or included items as supported by available permission tools.
   • If no narrower scope is clear, report across accessible user-created lists and libraries on the current site.
   • If a scope cannot be resolved, state that plainly in the report and do not guess.

3. Collect access information. For each scoped site/list/library/file/folder where available, read:

   • Who has access: users, groups, sharing principals, and links.
   • Permission level: normalize to Full Control, Edit, Read, or Other/Unknown.
   • Whether access is inherited or uniquely set.
   • Any sharing links, especially Anyone links.
   • External or guest users. If a tool fails or returns partial/empty permission data, record that limitation plainly; do not fill gaps from assumptions.