Teams permissions

Who can open each team's files

Choose teams, and ShareMaster finds the SharePoint site behind each one, and the separate site behind each of its private and shared channels, then runs the security matrix over them. The result is the security matrix workbook for exactly those sites, with Teams, Channels, Team members, Channel members and Data sources sheets added and the permissions sheet named Team & Channel Permissions. Nothing is changed.

Reads only. Nothing in SharePoint is changed.

On this page What it tells you How it runs How it works What you need What it will not do Read next

What it tells you

Who can open each team's files, and whether that is through the team itself, a SharePoint group, or a direct grant.
Who can open each private and shared channel's files, which is the channel's membership and not the team's.
Which files and folders in those sites have their own permissions, and every sharing link on them.

How it runs

Sign in. One window, asking for every read permission the run uses.
Choose teams. Tick the teams. Private and shared channel sites are included unless you untick them.
Next. ShareMaster finds each site. Any it cannot find are listed before anything is read, and you can carry on without them.
Security matrix options and run. The security matrix's own options page, run screen and workbook, with the teams' sites already chosen.

How it works

For each team you tick, the SharePoint site behind the team is looked up. With channel sites included, so is the separate site behind each private and shared channel, found from that channel's files folder. The resulting list of sites is de-duplicated. A team whose sites cannot be found is listed with the problem and the others carry on, and anything not found appears on the Summary sheet as not read.

Those sites then go through the Security matrix exactly as if you had picked them by hand, always including their subsites. Alongside, the team and channel membership is read the way the Teams report reads it: owners, members, and the members of each private and shared channel. Those lists are added to the security matrix workbook as extra sheets, so the Teams side and the SharePoint side of access are in one file.

Signed in as yourself, private and shared channels appear only when you are a member of them. When the tenant's ShareMaster certificate has Teams access, which is used by default when it is there, every channel is seen.

What you need

A Microsoft 365 sign-in that can be granted Group.Read.All, GroupMember.Read.All, Team.ReadBasic.All, Channel.ReadBasic.All, Sites.Read.All, TeamMember.Read.All and ChannelMember.Read.All.
You see the permissions of every site your account can open. A SharePoint or Global administrator sees them all.

What it will not do

It reads and never changes a permission.
Signed in as yourself, private and shared channels are offered when you are a member of them.