Are values like IsInherited and LastAccessedDate available in the SQL data?

In order to give site/doc library owners what they need for proper permissions auditing, I modified the SQL used in the “SharePoint Online Object Permissions” state-in-time report and generated a report for each site/document library area. The code spits out 2 result sets:

1.) A list of every individual that has access to at least 1 item in the specified location and a count of how many items they have access to.

2.) A detail list which includes a line for every object/user combination in that area.

One of the data owners, who is working on auditing a large doc library area, asked if there was a way to include whether the permissions specified for a row on the detail list was inherited from a parent or not. They also wanted to include when the person last accessed that specific item.

I am curious if either of those data points live in the data anywhere. The report is based on data in [Netwrix_CommonDB].

Marc,

Thanks for your post. Since we do not publish the SQL schema for Auditor, I can’t provide too much information about your question. For the first part, I would look into using the MCP add-on to create an MCP server that you can use to search the Auditor database, you may find the information you are looking for.

I can tell that you that we do not collect AccessTime, so that will not be in the database, so you won’t be able to report on that. If that is something that interest you, you can always leave an idea on the Ideas Portal.

You can find out more about the MCP server from here: Official Auditor MCP Server - Auditor / Show & Tell - Netwrix Community