MC1197128 – New permissions report available in SharePoint admin center

Product:

Copilot, Microsoft 365 admin center, Microsoft 365 Apps, SharePoint

Platform:

Online, US Instances, Web, World tenant

Status:

Rolling out

Change type:

New feature, Admin impact

Links:

492621

Details:

Summary:
A new Permissions report in the SharePoint admin center (under Data access governance) will show which sites a user can access, including direct or group-based permissions. Rolling out worldwide from mid-December 2025 to mid-January 2026, it requires no configuration and aids permission reviews.

Details:
[Introduction]
We're introducing a new Permissions report in the SharePoint admin center under Data access governance. This report helps SharePoint admins quickly identify which sites a specific user can access, including whether access is granted directly or through group membership. This feature supports investigations and permission reviews, especially before assigning Copilot licenses.
This message is associated with Roadmap ID 492621.
[When this will happen:]
General Availability (Worldwide, GCC, GCCH, DoD): Rollout begins mid-December 2025 and completes by mid-January 2026.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability

Created:
2025-12-18

updated:
2025-12-18

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

linked item details

XXXXXXX ... free basic plan only

Pictures

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

User Access Confusion
Without preparation, users may be confused about their access rights, leading to potential security risks if they assume they have access to sites they do not.
   - roles: SharePoint Administrators, End Users
   - references: https://learn.microsoft.com/sharepoint/data-access-governance-site-permissions-users-report, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=492621

Increased Administrative Workload
The introduction of the new report may lead to an increased workload for SharePoint administrators who need to review and update permissions without prior training or documentation updates.
   - roles: SharePoint Administrators, IT Support Staff
   - references: https://learn.microsoft.com/sharepoint/data-access-governance-site-permissions-users-report, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=492621

Configutation Options**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

Imagine you have a large office building with many rooms, and you need to know which employees have keys to which rooms. In the past, you might have had to check a list or ask around to find out who can access each room. Now, imagine if you had a magic map that instantly shows you which rooms each employee can enter, whether they have their own key or they share a key with a group.

This is similar to the new Permissions report in the SharePoint admin center. It's like that magic map for your digital office. The report will show SharePoint administrators which sites a user can access, and it will specify if they have direct access (like having their own key) or if they have access through a group (like sharing a key with a team). This feature is rolling out worldwide from mid-December 2025 to mid-January 2026 and doesn't require any setup, making it easy to use right away.

This new tool will be particularly useful for those managing site permissions and access, as it supports investigations and permission reviews. It's like having a clear overview of who can go where in your digital workspace, which is crucial before making decisions like assigning new tools or licenses, such as Copilot.

No compliance issues have been identified with this new feature, but it's always good to review it according to your organization's standards. For more information, you can explore the links provided in the announcement to learn how to make the most of this new capability.