Avatar of Pau Lo
Pau Lo asked on

SharePoint ACL testing.

I will soon have to look at some access control lists/ permissions on directories in SharePoint (version yet to be revealed) for a data protection piece of work. Just wondered if there is any PowerShell cmdlets, similar to get-acl which you can run over a traditional windows file server which could be of use, or if the acl's are actually in the database associated with sharepoint rather than the objects themselves. I did read many years back checking permissions in SharePoint was horrendously complex but I hope things have improved.
PowershellMicrosoft SharePointWindows OS

Avatar of undefined
Last Comment
Pau Lo

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
Jeff Glover

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
ASKER
Pau Lo

Thank you will try it out. Does sharepoint use Ad groups for governing access or are the groups defined within Sharepoint itself?
Jeff Glover

Ah. The $64000 question. yes and yes and even yes. It can use AD groups, SharePoint Groups, and/or AD users (directly). In a simple farm, in a perfect world, you would use AD groups. Easier to manage and prevents all sorts of issues. However, I have never seen a Farm in a perfect world. In many cases. AD user groups would be initially setup for basic site access and as you add lists and subsites, it would devolve into hodgepodge of AD groups, SharePoint groups and direct AD user permission assignments. In a company where the AD group is separate from the Sharepoint admins, it could be worse.
ASKER
Pau Lo

Thanks Jeff.
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy