PowerShell - List all users that have access to a particular SPLIstItem

Hi there,
In PowerShell - how to list all users that have access to a particular SPLIstItem?
Thanks so much in advance.

Hi frob,
According to your description, my understanding is that you want to list all users who have access to a particular SharePoint list item via PowerShell.
You can use the following PowerShell command:
$web = Get-SPWeb http://sp/sites/First
$list=$web.Lists["listV2"]
$item=$list.Items | where {$_['ID'] -eq 1}
$item | Select -ExpandProperty RoleAssignments |Select {$_.Member.DisplayName}, {$_.Member.LoginName}, RoleDefinitionBindings
In the above command, you need to change the web URL to your site's URL, change “listV2” to the name of your list, and change the ‘1’ to the ID of the list item.
The result looks like:
Best Regards,
Wendy
Wendy Li
TechNet Community Support

Similar Messages

How can I list all users who have access to a particular TABLE or VIEW

Hi,
Can someone tell me how I can list all users who have access to a particular TABLE or VIEW.
Abhishek

Hi,
Take a look on this link: http://www.petefinnigan.com/tools.htm
Cheers

Enumerate the users that have access to a particular directory

Hi, my name is Jennifer and I have been searching for an answer to my problem through several blogs. The problem is that I have a Directory of which I want to not only retrieve the users\groups that have access to it but also enumerate through the groups
to list actual users. The groups part is the main issue here. If I use get-acl, I can return any number of particular Active Directory groups that have access, however, I need to list the users inside this group and get-acl will not output an object I can
work with. I thought I could do something like this (which I may have seen on this forum before):
get-acl "C:\NestedGroupTest" | %{$_.access} \ ft -property identityreference
This will return the groups\users that have access. Example:
Domain\OU
NT Authority\system
Builtin\users
ETC...
I have tried exporting this output to a file and then trying to use get-adgroupmember (which obviously will not work on the non-AD groups) but the objects are of the wrong type so basically nothing in the Active Directory module will work...
This seems like such a simple issue but it is causing me grief to no end...please help

I can't guarantee that this will work in all cases, but it seems to work on my test domain. Warning: it's very slow and inefficient. It requires
this module (get the 3.0 test version), but you can modify the foreach block's code somewhat to get it to work with Get-Acl.
Get-Item C:\NestedGroupTest | Get-AccessControlEntry | ForEach-Object { $PropertyNames = $null }{
if (-not $PropertyNames) {
# We need to copy the property. This will get a list
# of the properties on each ACE when it encounters
# the first ACE (since the rest of this is so ineffecient,
# we can feel good that we saved some work by doing this)
$PropertyNames = $_ | Get-Member -MemberType Properties | select -exp Name
# Create a new hashtable that will be used to create a PSObject
$NewObjectProps = @{}
foreach ($CurrentProperty in $PropertyNames) {
$NewObjectProps.$CurrentProperty = $_.$CurrentProperty
# Check to see if this SID belongs to an AD group
Write-Verbose ("Current principal: {0}" -f $_.Principal)
try {
$Group = Get-ADGroup -Filter { SID -eq $_.SecurityIdentifier } -ErrorAction Stop
catch {
# Write a warning or something?
if ($Group) {
Write-Verbose " -> Group, so looking up members"
$Users = $Group | Get-ADGroupMember -Recursive | select @{N="Principal"; E={$_.SID.Translate([System.Security.Principal.NTAccount])}}, @{N="SecurityIdentifier"; E={$_.SID}}
else {
Write-Verbose " -> Not an AD group"
$Users = $_ | select Principal, SecurityIdentifier
# Go through each user/non-translated group, modify two
# hashtable properties, and create the new PSObject
$Users | ForEach-Object {
$NewObjectProps.SecurityIdentifier = $_.SecurityIdentifier
$NewObjectProps.Principal = $_.Principal
$NewObject = New-Object PSObject -Property $NewObjectProps
# This will make the new object show the module's custom formatting:
$NewObject.pstypenames.Insert(0, "PowerShellAccessControl.Types.AdaptedAce")
$NewObject
That should resemble the output that Get-AccessControlEntry would give you, but AD groups have been translated to users. If you pipe that to Export-CSV, you'd have plenty of information for each ACE, including the path, principal, security identifier, access
mask, etc. You could also pipe that to Select-Object and just ask for certain properties (try it with these properties: Path, Principal, AccessMask, AccessMaskDisplay, AppliesTo).
You can also use the Get-AccessControlEntry function's parameters to do some filtering on the ACEs that are returned (maybe you only want ACEs with FullControl, or ACEs that were not inherited...)
Give it a shot and let me know if it works for you. If you need more explanation of what's going on in the foreach-object process block, let me know and I'll try to help. It can be modified to work with version 2.1 of my module, and with Get-Acl.

How to find out list of users who have access to particulat SID

HI
How to find out the list of users who has access, to a particular SID?
Satish.

jurjen,
Thanks for replying, actually i was trying to navigate and execute the report using, SUIM...
could you help me to find out the list of users who has access to a particular system.. using SUIM.
satish.

List of users who have authorization for a particular transaction?

Hi All,
Can anyone guide me how to know the list of users who have authorization for a particular transaction?
I need this to find out the list of authorizations that are obsolete ,when the particular trnsaction is obsolete in an Upgrade process.
Thanks in advance.

we can get the list of users for a particular transaction as below.
get the tcode and place in AGR_TCODES and we get the list of roles .
loop the roles and pass each role to AGR_USERS and we get list of users for that role.
finally we got the list of users for that tcode.

Query: to view all users that have been created for access to a database

Hi,
Is there a command syntax that we could give to see all the users who have been created for access to a particular database. I want to view all the users that have been created using sql* plus.
can anyone help or is it impossible?
Thanks

This is for begging:
[email protected]> select grantee, privilege from dba_sys_privs where privilege like '%CREATE%SESSION%
2 /
GRANTEE PRIVILEGE
A CREATE SESSION
AA CREATE SESSION
U1 CREATE SESSION
U2 CREATE SESSION
BD1 CREATE SESSION
DBA CREATE SESSION
EMI CREATE SESSION
MOB CREATE SESSION
ODM CREATE SESSION
OHP CREATE SESSION
SEC CREATE SESSION
SYS CREATE SESSION
TU1 CREATE SESSION
TU2 CREATE SESSION
U01 CREATE SESSION
XDB CREATE SESSION
MOBI CREATE SESSION
OHP4 CREATE SESSION
PFAY CREATE SESSION
UD01 CREATE SESSION
UR01 CREATE SESSION
ADHOC CREATE SESSION
BATCH CREATE SESSION
DEBUG CREATE SESSION
DEV01 CREATE SESSION
HRAPP CREATE SESSION
MDSYS CREATE SESSION
MOBI2 CREATE SESSION
SKING CREATE SESSION
SPACE CREATE SESSION
UPASS CREATE SESSION
WKSYS CREATE SESSION
CTXSYS CREATE SESSION
ORDSYS CREATE SESSION
PRAC01 CREATE SESSION
RTABLE CREATE SESSION
CONNECT CREATE SESSION
Than you have to select also all the users that have granted roles with this privilege
this will give you the full set of users who can connect
Best Regards
Krystian Zieja / mob

How to get list of users who have access to a SAP module

Hi,
We are developing a tool in Java where we will pull the data from various modules in SAP (like Purchase order, Invoice etc). Lets take Purchase Order Module as example. I can get the data using BAPIs (like BAPI_PO_GETDETAIL).
However to implement Authorization, I also want the list of users/groups that have access to Purchase order module. Is this possible? Or can we get the ACL information from the tables in database like EKKO for Purchase order?
I have tried searching for solution but couldn't find any. Please suggest if there is some standard way by which we can pull the ACL information via Java, or if this can be achieved by some custom RFCs.
Thanks,
Anurag

Anurag,
The best way is to wirte a RFC Function Module (It will fetch the roles of the user from agr_users table) which will take user id as import paramter and will give you assigned roles.
Please let me know if you still need any further information.
Thanks,
Hamendra

List of users who have access to multiple mailboxes

Hi,
I got the list of around three hundred generic mailboxes
Please help me with the command which can help me to get the report of all users who has access on those generic mailbox.

Hi,
If you want to export these permissions to a csv file, you can use the following cmdlet:
Get-Mailbox -ResultSize Unlimited | Get-MailboxPermission | Where {$_.user -notlike "NT AUTHORITY\SELF" -and $_.IsInherited -eq $false} | Select Identity,User,@{Name='Access Rights';Expression={[String]::join(‘, ‘, $_.AccessRights)}} | Export-Csv
C:\MailboxAccess.csv -NoTypeInformation
Hope this can be helpful to you.
Best regards,
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Amy Wang
TechNet Community Support

Portlet to display all users that have manager defined as currently displayed user profile

I need to create a portlet such that when a user finds a user's profile they see all of the users defined with manager set to the value of the profile user's employeeNumber.
Example:
(Think a directory of employees)
John searches and finds user named Jack. He sees Jack's name, phone number, address, etc in the General Information section. Then he also sees a section (Portlet) that lists all of Jack's direct reports. John clicks on one of Jack's direct reports (Sam), to find this person's phone number.
The Direct Reports portlet would be a search portlet that finds all of the users that have a mangerID property set to the value of Jack's employeeNumber property and displays them sorted by LastName.
I need some direction on where to start for this.
It seems like I need to use the Plumtree Server API in order to search for all of the user objects and sort them on a particular property, .e.g IPTObjectManager.Query Method (Int32, Int32, Int32, Int32, Int32, Object[][])
A crawler seems out because, I guess that would require creating a folder for every user in the system? If I create a single folder I would need a binary tree structure to the folder. (Has anybody done this?)
I am concerned about the performance related to performing this search each time a user examines a user's profile.
Can somebody direct me to an example of a search "Portlet"? All of the examples I see are of searching external information like Google, or use PRC (do not see how that would be implemented in a portlet), or use EDK (external and does not seem to be able to do this).

You don't need one workflow per user when a filtered view can do this for you. If the manager's list is the parent calendar, I'm assuming that he'll be at least using the person look-up column.
Whether this feeds through the MyCalendar or stays where it is, you can use the [Me] parameter within the filter on a new view. This will then return the assigned holiday filtering against the account that is logged in.
Steven Andrews
SharePoint Business Analyst: LiveNation Entertainment
Blog: baron72.wordpress.com
Twitter: Follow @backpackerd00d
My Wiki Articles:
CodePlex Corner Series
Please remember to mark your question as "answered" if this solves (or helps) your problem.

List of users who have access to a specific universe

Hello Experts,
We have a requirement to get the list of the users who have access to a specific universe. Please suggest how to achieve this ?
Is there any query to find this list by query builder or query to audit database ?
We are using Business objects 3.1 sp5.
Many Thanks
Ankur

Ankur,
Refer to the discussion below:
how to get a list of reports a user has access to, using either the cms database or the auditing database
Regards,
Ashvin

Query that show all users who have access in BW cubes & Query's Owner

Hi Experts,
Good day !!!
I would like to know if it's possible to create a query that tell us who has access to all the cubes in BW? This is a business requrement that we should create if possbile. We also wonder if we may also create a query for shows us all the queries and who created them? We are doing this manually for each query. We only manually look for all the areas that I have access, but if it can be done systematically, that would save a lot of time.
Thanks in advance guys !!!
Best Regards,
Marshanlou

Hi,
Then For this You need to create the table of your own fields with all the user names in R/3 side and Develop the report,
Bue users will not the stay in same company , They will be changing and some user will be coming, every time u can t go enhancement.
Regards
Radha

I want all users to have access to all programs

I've just hired 2 interns and so for the first time I'm setting up a new user account other than my own administrator account. There are a few things I'd like to do.
1. I figured out that I need to put the files I want to share with both interns into the Shared folder. I'm guessing I did that right because it seems to work.
2. I'd like for both users to have the use of all or most of the software installed on my machine. How can I set that up? Is there a way to only give them access to some software but not all?
3. I'd like to set up their Dock to look like mine. Is there any way to do this other than to take a screen shot of mine and simply recreate it on their log-in?
Thanks,
Ben

Hello Benjamin,
Seems like you are already file sharing with the other computers...That is great.
As far as them using your applications......you must install the applications onto their computers for them to be able to use the application.
As for the look of the dock......Once you have installed the applications onto their computers...you can make the dock look like yours simply by adding the icons to the dock. The dock can change appearance very easily just by dragging and dropping icons.
I am not an expert in sharing but in school we have things set up this way. I have set one computer to act as the main file sharer. Be sure to do periodic back ups...HTH....Jim

How can I kick out a older computer from the list of computers that have access to CC?

When I want to start an CC app it says there are already 2 computers using Adobe CC on my account. How can I manage the list of computers in this list?

I checked it out by myself: I could quit my CC account on the old computer with Creative Cloud Desktop App > Preferences > Delete account on this computer.

List of users who has access to current community

Hi,
Is there an API which provides list of users who have access to current community in ALUI? Will there be huge performance impact in retrieving the list of all users who have access to current communty?
Thanks
Sampath

Sorry,
I am not quite following you..
Users can only view a community if the permissions exist for that specific community. I dont understand what do you meant by
"I need to let user type a name and show his/her user ID from the list of users who have access to the current community".
Are you trying to look at user permissions based on a list of communities existing in the portal? The user can't even get to that community if he doesn't have permissions.

Report all user who has access to * infotypes

Hi guys,
im loking for a report that show me wich users has access to infotypes.
right now i need to go to su01 then clic on roles, then clic on a especific role and then in display role authorizations, there i can see human resources, personal data and infotipe with *.
and i need to know all the users that have access to all infotypes or an especific one.
any ideas?

There are a lot of auth objects in the HR area....
My advice would be to pick the main ones and search with pattern '#**' for the infotype field to see what you get.
But other fields are also relevant. In HR you need to know the data, and not just the coding and the customizing (SPRO) and the authority (PFCG).
Talk to your functional folks and the HR system support. They will be able to help you more than we can, most likely.
Cheers,
Julius

PowerShell - List all users that have access to a particular SPLIstItem

Similar Messages

Maybe you are looking for