Permission Report

[nicole-ge]

Hi there :)
Can I iterate through all pages in my tenant and check which groups or persons have permissions to the site collections? If yes, which permission do I need to execute it?

[milanholemans]

Hi @nicole-ge I think this should be possible if you use the following commands yes:

• https://pnp.github.io/cli-microsoft365/cmd/spo/site/site-list
• https://pnp.github.io/cli-microsoft365/cmd/spo/page/page-list
• https://pnp.github.io/cli-microsoft365/cmd/spo/file/file-get

[nicole-ge]

Hi @milanholemans

How can I authenticate via app registration with client secret or certificate?

And then iterate through all site collection and get the user, which have permission to it?

Can you give me an idea?

[milanholemans]

We've got an extended documentation. You should be bale to find it there.
To log in using certificates, take a look at this section: https://pnp.github.io/cli-microsoft365/user-guide/connecting-microsoft-365#log-in-using-a-certificate

As mentioned above, you should just list all site collections using spo site list. Then list all pages using spo page list --webUrl <URL>. For every page you can get the permissions using spo file get --webUrl <URL> --id <UniqueId>.