Summary
- SharePoint admin center is getting a new Data access governance report for group permissions.
- SharePoint administrators can identify all sites a given group can access and see the extent of that access.
- The report is intended to help investigate potential exposure of sensitive content, especially for broadly scoped groups such as vendor groups.
- Administrators should review current SharePoint permissions, notify internal owners about the new capability, and update documentation/workflows.
- The report may also help admins verify group permissions before assigning Copilot licenses.
Primary Service: SharePoint
Admin Impact: Medium
User Impact: Low
Release Start: 30 Nov 2026
Release End: 01 Dec 2026
Services: SharePoint
Category: Stay informed
Tags: Admin Action, New Feature
History
11/5/2026 Item Added to Message Center
Microsoft Message
We are introducing a new Data access governance report in the SharePoint admin center that allows SharePoint administrators to identify all sites accessible to a given group and the extent of that access. Groups with broad membership, including groups created for vendors, can expose sensitive content to unintended recipients. This report helps administrators investigate potential exposure and verify group permissions.
Rollout schedule
General Availability (Worldwide, GCC, GCC High, DoD): Rollout will begin in late November 2026 and is expected to complete by early December 2026.
Impact on your organization
Who is affected
SharePoint administrators responsible for managing and reviewing site permissions.
Platforms and services
- Microsoft SharePoint admin center
- Data access governance
What will happen
- SharePoint administrators will be able to use the new report to identify all sites accessible to a given group. The report will show the extent of the group’s access to those sites.
- Administrators can use the report to investigate potential exposure of sensitive content and to review group permissions before assigning Copilot licenses.
Data access governance page
Action required and recommendations
We recommend that you:
- Review your current SharePoint site permissions configuration to identify potential exposure.
- Notify your SharePoint administrators about the new reporting capability in the SharePoint admin center.
- Update your internal documentation and workflows to reflect this change.
Learn more
Data access governance reports – get site permission report for given users – SharePoint in Microsoft 365 | Microsoft Learn
Compliance considerations
No compliance considerations identified. Review as appropriate for your organization.