Permission backups & recovery

Back up permissions for a site or library

Connect one tenant, choose a SharePoint scope, and save a permission baseline.

Quick answer

Open Permission backups, choose or create a workspace, connect its tenant, and save a site, list, or library. Take a permission backup and check its coverage before relying on it as a baseline.

Your next step

Create a backup for a small site or library whose current permissions you understand.

What you are saving

A permission backup records access settings for existing SharePoint objects in one tenant. It saves user and group role assignments, permission levels, and inheritance for the selected scope. It does not back up document contents or versions.

Manual and scheduled backups, comparisons, recovery-plan preparation, and CSV exports are free. Applying an approved permission recovery uses the same restore credits as core restoration.

1. Choose a workspace and tenant

  1. Choose Permission backups in the app menu.
  2. Select an existing workspace, or expand Create a backup workspace, enter a name, and choose Create workspace.
  3. Choose a tenant from the Tenant list. Current and previously connected tenants for this account appear there. Selecting one checks its connection.
  4. If reauthorization is required, use the offered reconnect action. For a new tenant, choose Connect another tenant. Complete the Microsoft connection in the popup; the backup page stays open and updates when the connection finishes.
  5. Confirm the tenant name and Connected status before choosing a scope.

2. Choose what to back up

  1. Select a saved Site or library, or expand Add a site or library.
  2. Enter the SharePoint site URL and choose Find lists and libraries.
  3. Choose This site and its visible lists and libraries, or select one list or library. Give the scope a recognizable name.
  4. Choose Save site or library. For larger sites, begin with a smaller library and check coverage before adding more scopes.

3. Save and inspect a backup

  1. Under Save permission backups, optionally enter a Backup label such as Before access changes.
  2. Choose Take permission backup. The backup is queued and its history updates as it runs.
  3. When it finishes, choose View coverage. The report opens below the history and shows captured objects, inheritance, and coverage notes.
  4. Check any partial or failed result before using it. Missing or unreadable data is not evidence that an object has no access.
  5. Choose Export CSV to download the saved permission record. To compare later, keep the saved backup in this same scope.

Continue with the next relevant guide.

Need help with your project?

Send the exact error and your project, batch, or run reference so we can investigate.

Get support