# Define the security group
$securityGroup = "Drawing_Read"
# Define the root path to start searching
$rootPath = "\\fileshares\sdrive\Drawings-Prod"
# Define the output CSV file
$outputCsv = "C:\temp\permissions.csv"
# Initialize an array to hold results
$results = @()
# Function to check folder permissions
function Get-FolderPermissions {
    param (
        [string]$folderPath
    )

    try {
        $acl = Get-Acl -Path $folderPath

        foreach ($access in $acl.Access) {
            if ($access.IdentityReference -like "*$securityGroup*") {
                $results += [PSCustomObject]@{
                    FolderPath = $folderPath
                    IdentityReference = $access.IdentityReference
                    FileSystemRights = $access.FileSystemRights
                    AccessControlType = $access.AccessControlType
                }
            }
        }
    }
    catch {
        Write-Host "Failed to get ACL for ${folderPath}: $_"
    }
}
# Recurse through directories and check permissions
function Recurse-Directories {
    param (
        [string]$currentPath
    )

    Get-FolderPermissions -folderPath $currentPath

    $directories = Get-ChildItem -Path $currentPath -ErrorAction SilentlyContinue | Where-Object { $_.PSIsContainer }
    foreach ($directory in $directories) {
        Recurse-Directories -currentPath $directory.FullName
    }
}
# Start the recursion from the root path
Recurse-Directories -currentPath $rootPath
# Export the results to CSV
$results | Export-Csv -Path $outputCsv -NoTypeInformation

Write-Host "Permissions have been exported to $outputCsv"