Match SPO permissions to Report Filter Options (specifically Full Control)

Products Auditor Ideas
,
1

What is a one sentence summary of your feature request?

The permissions output in the SPO object permissions report should match the permissions available in the filter options, especially for Full Control.

Please describe your idea in detail. What is your problem, why do you feel this idea is the best solution, etc.

When reporting on SPO objects that have users with Full Control, the report does not simply display Full Control (it used to at one point). Instead, the report shows every individual permission assigned. It would be ideal if Full Control was simply reported as Full Control like it once was. “Full Control” is easier to understand by non-technical report readers (auditors aren’t necessarily technical).

How do you currently solve the challenges you have by not having this feature?

We used to have it, and now we don’t. Actually feels like a step backward from a reporting perspective. We solve the challenge by spending time explaining the report instead of the report explaining itself.

2

Hi Yianni,

This report is based on Microsoft’s official documentation, which states that Full Control encompasses all permissions.

Based on our analysis, this is likely due to a Deny entry on the Add and Customize Pages permission for the affected site collection. You can verify this using the Check Permissions feature in the site collection settings.

Please note that the product’s reporting cannot override missing permissions and elevate access to Full Control when certain permissions are explicitly denied.

Kind regards,
Evgenii

1 Like