Audit privileged SharePoint access including Site Collection Admins, owners, and Full Control.
Related topics
privileged access
admin audit
permission review
access certification
least privilege
About this tool
The Privileged Access Report audits all users with elevated SharePoint permissions. Find Site Collection Administrators, site owners, and users with Full Control access across your environment.
Identify excessive privileged access that may indicate permission creep over time. Compare against role requirements to ensure least-privilege principles are maintained.
Export results to Excel for access certification workflows and remediation tracking.
Key features
Site Collection Admin audit
Owner role identification
Full Control access scan
Admin role mapping
Permission level analysis
Department-level reporting
Historical comparison
Certification workflow support
Use cases
Access certification. Review and certify privileged access
Privilege audit. Document all privileged access for audit
Least privilege verification. Verify adherence to least-privilege principles
Requires a paid edition (security). The Suite bundle includes this tool alongside every other capability in the catalogue.
Limitations & out-of-scope
RoleManagement.Read.Directory is read-only and scoped narrowly to SharePoint-relevant privilege holders, not the full Entra ID role catalog — PIM-eligible and PIM-active role assignments are Entra ID Advanced Export's job, not this one's. The audit covers Site Collection Administrator, Owner, and Full Control grants specifically; a user with edit-but-not-owner rights on a site won't appear here even if their practical access is broad.