Delete Permissions
The Delete Permissions action is used to completely remove all permissions for a selected user across the specified scope. It is particularly useful when a user no longer needs access to a site or when their access should be fully revoked after leaving a role or organisation.
To initiate this action, go to a Discover Site Permissions report. Select the account from which you want to delete permissions. Then, navigate to Actions -> Account Management -> Delete Permissions to access this functionality and adjust the settings as needed.
Important Note: While Delete Permissions can be triggered from within a Discover Permissions report, it can also be used independently, provided you define the scope beforehand. If no scope is selected, DeliverPoint will apply the action to the current site/location of the operation.
Tip: To ensure that permissions are removed across all relevant levels, check options like Process Subsites, Process Lists, and Process List/Folder Items. If necessary, selecting Modify SharePoint Groups and Modify Microsoft 365 Groups will remove the user from group memberships, ensuring complete access revocation. Additionally, enabling Support Rollback allows you to undo the action if needed.
Where and When to Use Delete Permissions
The Delete Permissions action is most useful in the following scenarios:
- User has left the organization: When a user leaves the organization and should no longer have access to any resources, the Delete Permissions action will ensure their access is revoked across all relevant locations.
- Role replacement without transfer: If a user is leaving, and their role is not being directly replaced, using Delete Permissions will fully remove their access without transferring it to another user.
- Cleaning up direct permissions: If a user has multiple direct permissions (assigned directly and not through groups), the Delete Permissions action allows you to clean up these permissions without affecting group memberships.