How to Manage SharePoint Folder Permissions in Bulk Using PowerShell
Question details
The user needs a method to bulk update SharePoint folder permissions for Active Directory groups across thousands of subfolders to avoid manual configuration.
- Product
- Microsoft SharePoint
- Device & OS
- not provided
- Scenario
- Assigning different access levels to thousands of subfolders for specific Active Directory groups without doing it manually.
- Observed behavior
- Updating folder permissions manually requires thousands of individual clicks per folder, making it highly inefficient to manage subfolder inheritance and access.
Ensure you have SharePoint Administrator or Site Owner privileges, and install the latest PnP PowerShell module on your system to run the necessary commands.
Use PnP PowerShell to Bulk Manage Folder Permissions
Utilize the PnP PowerShell module and the Set-PnPFolderPermission command to automate permission assignments for Active Directory groups across multiple subfolders.
Instead of manually clicking through thousands of folders, you can use PnP PowerShell scripts to break inheritance and assign specific permissions to Active Directory groups automatically.
Note that Active Directory groups should ideally have associated email addresses to be seamlessly resolved and assigned permissions in SharePoint via PowerShell.
Open PowerShell as an Administrator and run 'Install-Module -Name PnP.PowerShell' to install the necessary SharePoint management commands.
Connect to your target SharePoint environment by running 'Connect-PnPOnline -Url <YourSiteURL> -Interactive', logging in with your admin credentials.
In your script, iterate through the target folders and break their permission inheritance so they do not simply copy the parent folder's access levels.
Use the 'Set-PnPFolderPermission' cmdlet within your script loop to grant specific access (e.g., Read or Edit) to your Active Directory group for each target folder.
Try WPS Office for Your Document Management Needs
While managing SharePoint permissions requires complex PowerShell scripting, dealing with everyday documents doesn't have to be complicated. WPS Office provides a free, lightweight, and user-friendly alternative to Microsoft Office for all your document creation and collaboration needs.
- 1. Download the Installer: Visit the official WPS Office website and click the 'Download' button to get the free installer.
- 2. Install WPS Office: Run the downloaded setup file and follow the straightforward on-screen instructions to install the suite.
- 3. Start Creating Documents: Open WPS Office to immediately start creating, editing, and managing your documents, spreadsheets, and presentations.
Frequently Asked Questions
Can I assign SharePoint folder permissions to Active Directory groups without email addresses?
While possible, SharePoint resolves and syncs Active Directory groups much more reliably when they have an associated email address. If they do not, you may face issues assigning permissions via PowerShell and might need to configure them as mail-enabled security groups first.
Where can I find complete PowerShell scripts for bulk managing SharePoint permissions?
Because scripts for bulk updating thousands of folders can be complex and specific to your organizational structure, it is highly recommended to seek detailed script examples and guidance on the official Microsoft SharePoint Tech Community.
Does Set-PnPFolderPermission work for default site groups as well as AD groups?
Yes, the Set-PnPFolderPermission cmdlet can be used to assign access rights to both default SharePoint site groups (like Owners, Members, Visitors) and synchronized Active Directory groups.
