You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: sharepoint/sharepoint-ps/sharepoint-online/Get-SPORestrictedAccessForSitesInsights.md
+16-71Lines changed: 16 additions & 71 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -15,7 +15,7 @@ manager:
15
15
16
16
## SYNOPSIS
17
17
18
-
This cmdlet enables the administrator to check status of all active and available reports about insights on sites protected and access denials by Restricted access control policy when no report ID is present and to view or download the report if report ID is present.
18
+
This cmdlet enables the administrator to check status of all active and available reports about insights on sites protected and access denials by restricted access control.
If this cmdlet is executed with `-RACProtectedSites` as parameter, it displays the status of all active and completed reports with the following properties:
32
+
If this cmdlet is executed with `-RACProtectedSites` as parameter, it displays the status of all the active and completed reports.
| CreatedDateTimeInUtc | The date and time the report creation was triggered in UTC. |
38
-
| Status | The status of the report. |
34
+
If this cmdlet is executed with `-RACProtectedSites``-ReportId` as parameter, top 100 sites with the highest page views that are protected by restricted access control will be displayed.
39
35
40
-
If this cmdlet is executed with `-RACProtectedSites``-ReportId` as parameter, top 100 sites with highest page views that are protected by Restrcited access control will be displayed with the following properties:
36
+
If this cmdlet is executed with `-RACProtectedSites``-ReportId``-InsightsSummary`as parameter, the count of sites protected with restricted access control compared to total number of sites will be displayed.
| SiteSensitivity | The sensitivity label of the SharePoint site. |
48
-
| PrimaryAdmin | Primary admin of the SharePoint Site |
49
-
| BlockDownloadPolicy | Boolean status of Block download policy on the site. |
50
-
| ConditionalAccessPolicy | Authentication context set for the Conditional access policy |
51
-
| RestrictedAccessControlGroups| Entra Groups configured during policy configuration |
38
+
If this cmdlet is executed with `-ActionsBlockedByPolicy` as parameter, it displays the status of all active and completed reports.
39
+
40
+
If this cmdlet is executed with `-ActionsBlockedByPolicy``-ReportId``-Content TopSites` as parameter, top 100 sites with the highest access denials by restricted access control will be displayed.
52
41
53
-
If this cmdlet is executed with `-RACProtectedSites``-ReportId``-InsightsSummary` as parameter, count of sites protected with restricted access control compared to total number of sites will be displayed.
42
+
If this cmdlet is executed with `-ActionsBlockedByPolicy``-ReportId``-Content TopUsers` as parameter, top 10 users with the highest access denials by restricted access control will be displayed.
54
43
55
-
If this cmdlet is executed with `-ActionsBlockedByPolicy` as parameter, it displays the status of all active and completed reports with the following properties:
44
+
If this cmdlet is executed with `-ActionsBlockedByPolicy``-ReportId``-Content AllDenials`as parameter, most recent 100 access denials by restricted access control in the last 28 days will be displayed.
| CreatedDateTimeInUtc | The date and time the report creation was triggered in UTC. |
61
-
| Status | The status of the report. |
62
-
63
-
If this cmdlet is executed with `-ActionsBlockedByPolicy``-ReportId``-Content TopSites` as parameter, top 100 sites with highest access denials by Restricted access control will be displayed with the following properties:
| SiteSensitivity | The sensitivity label of the SharePoint site. |
70
-
| SiteType | The type of the SharePoint site. |
71
-
| AccessDenialsCount | Total number of access denials on the site. |
72
-
| UniqueUsersBlocked | Count of Unique users denied access on the site. |
73
-
74
-
If this cmdlet is executed with `-ActionsBlockedByPolicy``-ReportId``-Content TopUsers` as parameter, top 10 users with highest access denials by Restricted access control will be displayed with the following properties:
| AccessDenialsCount | Total number of access denials faced by the user. |
80
-
81
-
If this cmdlet is executed with `-ActionsBlockedByPolicy``-ReportId``-Content AllDenials` as parameter, most recent 100 access denials by Restricted access control in the last 28 days will be displayed with the following properties:
| AccessDenialDateTimeInUtc | The timestamp of access denial. |
86
-
| SiteName | The name of the SharePoint site. |
87
-
| SiteURL | The URL of the SharePoint site. |
88
-
| SiteType | The type of the SharePoint site. |
89
-
| SiteOwnerName | Primary Owner of the SharePoint site. |
90
-
| UserEmail | Email ID of the denied user. |
91
-
| RestrictedAccessControlGroups| Entra Groups configured during policy configuration |
92
-
| SiteSensitivity | The sensitivity label of the SharePoint site. |
93
-
94
-
If this cmdlet is executed with `-ActionsBlockedByPolicy``-ReportId``-Content SiteDistribution` as parameter, distribution of access denials by Restricted access control on different site types will be displayed with the following properties:
| AccessDenialsCount | Total number of access denials on the site type. |
100
-
| UniqueUsersBlockedCount | Count of Unique users denied access on the site type. |
101
-
| SiteTypePercentage | Relative percentage of access denials by the site type. |
46
+
If this cmdlet is executed with `-ActionsBlockedByPolicy``-ReportId``-Content SiteDistribution` as parameter, distribution of access denials by restricted access control on different site types will be displayed.
102
47
103
48
> [!NOTE]
104
49
> All reports adhere to any retention timeline as per [Data Access Governance](/sharepoint/data-access-governance-reports).
@@ -111,29 +56,29 @@ If this cmdlet is executed with `-ActionsBlockedByPolicy` `-ReportId` `-Content
Example 1 enables administrator to view the status of all active and completed reports on list of sites protected with restricted access control policy.
59
+
Example 1 enables administrator to view the status of all active and completed reports on list of sites protected with restricted access control.
Example 2 enables administrator to view the list of sites protected with restricted access control policy report with ReportId: `9d946216-afe7-49f5-8267-7b662435c70b`
67
+
Example 2 enables administrator to view the report containing list of sites protected with restricted access control with ReportId: `9d946216-afe7-49f5-8267-7b662435c70b`
Example 3 enables administrator to view the top sites with access denials due to restricted access control policy report of ReportId: `9d946216-afe7-49f5-8267-7b662435c70b`.
75
+
Example 3 enables administrator to view the report containing top sites with access denials due to restricted access control with ReportId: `9d946216-afe7-49f5-8267-7b662435c70b`.
131
76
132
77
## PARAMETERS
133
78
134
79
### -RACProtectedSites
135
80
136
-
It is an optional parameter, and it specifies the type of the report to be viewed or downloaded.
81
+
It is an optional parameter, and it specifies the type of report to be viewed or downloaded.
After this cmdlet is executed, the Restricted Access Control insights report generation request for the requested sub type gets queued in the pipeline and the below metadata is displayed with the following properties:
0 commit comments