Granted Access panel

The “Granted Access” panel lets Tenant Admins and delegated operators review and manage permissions for SharePoint files and folders, including both email and link-based access.

Access and navigation

1. Open the panel by clicking the name of any listed item.
2. Navigate between items using up/down arrows; the panel remains open.
3. Close the panel by clicking the “X” button at the top right.

Panel overview

1. Item name and icon: the top section displays the name and icon for each file or folder. Documents show their file extension (e.g., .docx).
2. Link icon: click to copy a direct link to the file or folder. Permission to access may be required.
3. Item audit button: opens the “SharePoint activities” report.
4. Tabs: show individual users with access, groups with access, and shared links with their access recipients.

Reviewing people, groups, and links

People

The “People” tab provides detailed information about users who have been granted access:

• User principal name: lists the user accounts with access to the file or folder.
• User type: indicates whether each user is internal or a guest.
• Access setting: see the “Access setting” section below for specific permission types.
• Access type: specifies if access was granted directly via email invitation or through a shared link.

For each user:

• Click the arrow icon to access the User Card.
• Click the pencil icon to manage permissions in the “Manage Access” panel.

Groups

The “Groups” tab provides detailed information about users who have been granted access:

• Group name: lists the groups with access to the file or folder.
• Contains external: identifies groups that include members from outside the organization. 
• Group type: indicates whether each group is a SharePoint group, Security group, or Microsoft 365 group.
• Access setting: see the “Access setting” section below for specific permission types.
• Access type: specifies if access was granted directly via email invitation or through a shared link.

For each group:

• Click the pencil icon to manage group permissions in the “Manage Access” panel.

Links

The “Links” tab provides detailed information about each shared link that grants access to files or folders:

• Link: displays the URLs that were generated to provide access. 
• Access setting: see the “Access setting” section below for specific permission types.
• Sharing type: shows the scope of access granted by the link (“Anyone”, “People in organization”, “People with existing access”, “People you choose”).
• Is link shared externally: filterable column indicating whether the file is shared with external users (true/false). It is directly linked to the “Links shared with external users” counter in the “Items with Unique Permissions report” report.

For each link:

• Click the pencil icon to manage permissions in the “Manage Access” panel.

Access settings

Below are the access settings you may find listed in the “Access setting” column within each tab:

• Owner: full edit rights; identifies the file creator.
• Edit: can modify, add, delete, or collaborate in real time; may re-share per site rules.
• Can view: read-only; can view but not change or edit. Download is allowed unless restricted.
• Can’t download: can only view in browser; downloading, printing, or syncing is prevented.
• Can review (Word documents only): can suggest edits and comments; final changes need approval.
• Custom: unique combinations of permissions, beyond default types.

Bulk access removal

Select multiple entries in any tab to display the relevant “Remove access” button in the top-right. Click to revoke access for selected users or groups in bulk.