Microsoft Copilot
Glossary
SharePoint permissions
SharePoint permissions are the access rights that decide who can view, edit or manage a SharePoint site, library, folder or file, granted through SharePoint groups, Microsoft 365 groups, direct assignments and sharing links.
Also known as: SharePoint permissions management, SharePoint access rights, effective access
How the model works
By default a site has three SharePoint groups, owners, members and visitors, and everything inside inherits the site's permissions. Anyone with enough rights can break that inheritance on a library, folder or file and grant access directly. Sharing links add yet another layer, and for group-connected sites the Microsoft 365 group membership decides who the members are.
Why effective access is hard to see
To know who can really open a file you have to follow every path: inherited groups, nested groups, unique permissions and links. The admin tools show one site at a time. Across thousands of sites, that is why permission problems are usually discovered by accident, or by Copilot surfacing a file to the wrong person.
Where Rencore fits
Rencore policies flag sites with broken permission inheritance, subsites with unique permissions and files shared with external users. Actions restore inheritance on a site, list, folder or file, add or remove site collection administrators and remove users from a site, and access reviews ask reviewers to confirm who should keep access to a site collection.