The permission-review experience has two main views: Sites for workspace discovery and a permission explorer for one selected site or location.
Open the permission explorer
From SharePoint:
- Open a modern list or document library.
- Navigate to the folder that should be the starting scope.
- Clear any multi-selection.
- Select Manage permissions.
- Confirm the current location in the breadcrumb.
From the web part or Teams tab, open Protect and select a site name. From the browser app, select Continue with Microsoft, complete sign-in, and then select a site.
The browser-app header shows the connected account. Select Sign out to end the Protect session and return to the signed-out screen.
Navigate by breadcrumb
| Breadcrumb item | Result |
|---|---|
| All sites | Returns to the Sites view. |
| Site name | Loads permission entries at the selected site's root. |
| Folder name | Loads permission entries for that folder. |
Selecting a linked item in the Item column can also move the explorer to that content scope. Selecting a Location link opens the underlying SharePoint location.
Use permission commands
| Command | What it does | When it is available |
|---|---|---|
| Add | Grants one person or group one access level at the current location. | SharePoint-hosted permission explorer, Pro, non-root location |
| Refresh | Reloads shallow access or reloads nested access if detailed loading is active. | Permission explorer |
| Edit | Applies one selected access level to all selected permission entries. | Pro and at least one eligible row selected |
| Remove | Removes the selected assignments and handles supported inheritance restoration. | Pro and at least one eligible row selected |
| Manage SharePoint Groups | Opens the current site's native SharePoint group page. | Permission explorer |
| Access levels | Opens the current site's native SharePoint permission-level page. | Permission explorer |
| Import from Excel | Validates and adds SharePoint group assignments from a workbook. | Pro |
| Export to Excel | Downloads the loaded permission matrix. | Permission explorer |
The command bar also shows a text search and the number of selected permission rows. Reset filters appears when filters are active.
Search and filter permissions
Use search to match visible text such as an item path, principal, or access level. Use the Filters pane to combine structured criteria:
- Load — enable Load nested sharing entries to include child libraries, folders, files, and lists. Clear it to return to the current shallow scope.
- Item — select sites, document libraries, folders, files, or lists.
- Shared with — find an exact principal or select SharePoint group, Microsoft 365 group or Team, Security group, Distribution list, Person in your organization, Guest, People in your organization with the link, People you choose, or Anyone with the link.
- Access level — select one or more SharePoint role names returned by the current data.
- Location — find and select an exact loaded path.
- Access source — show items with custom access, inherited access, or both.
Filter labels include result counts. A zero count means the loaded data doesn't currently contain that type.
Read and adjust the table
The permission table contains sortable, resizable columns:
- Item groups entries by site, library, folder, file, or list.
- Shared with identifies the person, group, or sharing link.
- Access level shows the SharePoint role and capability icons such as view, download, upload, edit, approve, share, or delete.
- Location shows where the assignment applies.
An inherited entry includes a link to its parent source. A custom-access item without a visible assignment can show Add access as a placeholder; placeholder rows can't be selected for Edit or Remove.
Refresh after a change
- Wait for Changes saved. Select Refresh to see the latest access.
- Select Refresh.
- Confirm the changed principal, access level, location, and access source.
- If nested access was loaded before the change, allow the detailed refresh to complete.
SharePoint is the system of record. The saved message confirms the write completed; Refresh confirms the latest displayed state.
Open companion library commands
In a SharePoint document library, the Protect command extension also exposes:
- Manage columns to preview, edit, and save the library's metadata policy.
- Fill properties to validate and update properties for selected files.
- View approvals to inspect compatible approval states and run available bulk actions.
These commands operate on the current library selection and don't appear inside the general permission command bar.