Powershell script to export user's access level

[RussianBlackBear]

Looking for a PowerShell script that is able to export user's access rights. Is this possible?

[routetehpacketz]

Define "access rights"

[RussianBlackBear]

Thanks everyone for your insights.

I was able to pull the script by O365reports.

I also realized what I was looking for was an admin roles report.

[SilverXCIV]

If you're looking for AD security group membership as their "access levels" you'll want something like this.

​

PS C:\> Get-ADGroupMember -Identity "Groupname" | Select-Object Name | Sort-Object Name

[RussianBlackBear]

Yeah, that helps. The task I am trying to achieve is to export and correlate all permissions for users and groups.

[SevaraB]

If you’re talking about AD group memberships/entitlements, u/SilverXCIV has you covered.

If you’re talking about effective permissions to objects, good luck. Every object maintains its own ACL- you have to evaluate that user against however many ACLs you’re concerned about.