In order to give site/doc library owners what they need for proper permissions auditing, I modified the SQL used in the “SharePoint Online Object Permissions” state-in-time report and generated a report for each site/document library area. The code spits out 2 result sets:
1.) A list of every individual that has access to at least 1 item in the specified location and a count of how many items they have access to.
2.) A detail list which includes a line for every object/user combination in that area.
One of the data owners, who is working on auditing a large doc library area, asked if there was a way to include whether the permissions specified for a row on the detail list was inherited from a parent or not. They also wanted to include when the person last accessed that specific item.
I am curious if either of those data points live in the data anywhere. The report is based on data in [Netwrix_CommonDB].