How ShareSight worksConnect, scope, pack

After connect, toggle SharePoint, OneDrive, Teams, and Exchange Online.

SharePoint walks sites and libraries for links, guests, and unique permissions. OneDrive targets people by UPN instead of cryptic my.sharepoint URLs. Teams covers membership, private and shared channel sites, guest and template-drift findings, then reuses SharePoint classifiers on team file ACLs. Exchange covers calendar delegates and well-known folder permissions (Inbox, Tasks, Contacts).

Access Evaluation is scoped on purpose. You agree depth and sampling in workshop. Coverage notes list what was walked, what was sampled, and blind spots. Deep Library Audit is the paid full unique-permission walk on named high-risk libraries. We do not pretend every first scan is estate-complete.

Review surfaces severity filters, who/where boards, sharing-link centre views, and permissions matrix style site/library by principal evidence. Nested Entra groups expand within a bounded depth so guest-via-group paths show up without pretending infinite recursion.

The deliverable executives forward is the HTML/CSV/ZIP pack. That is the wedge versus another admin console. IM and privacy can read the pack without four Microsoft admin centres and without granting another SaaS seat to every stakeholder. Cyber can filter Critical Anyone links and High guests for the audit conversation. Policy pack options tune workshop defaults; they are not framework certification claims.

Remediation Sprint proposes revoke and harden actions by finding code. Execution waits for human approval and writes an audited change log. We do not silently strip permissions in the background. That matters for government and regulated buyers.

Quarterly Re-scan and scheduled alerts cover drift after the first baseline. That is retainer motion, not continuous Protect-class crawl marketing. If your RFP requires near-real-time estate matrix freshness on day one, say so early and keep Protect-class tools in the shortlist.

Many estates already have partial scripts for sharing reports. Those scripts rarely produce a consistent multi-workload pack with coverage honesty, nested group notes, Teams membership findings, and a readout room agenda. ShareSight productises that workshop so MSPs and internal teams stop rebuilding the same brittle inventory every audit cycle.

The method stays the same whether you are an agency, an MSP delivering for a named client, or a mid-market IM team under Copilot pressure: connect, scope, scan, pack, decide the next engagement from evidence. Permissions matrix views support the access job without claiming continuous estate-fresh Protect matrix marketing.

Critical Anyone links, High guests and delegates, Medium unique-permission density, and Coverage notes. Who/where boards tie each finding to a site, team, personal drive, or mailbox. Sharing-link centre views help filter Anyone versus organisation-wide versus specific-people links. The HTML/CSV/ZIP pack is what leaves the room with IM and privacy.

If the pack shows a hot library, Deep Library Audit is the paid full walk. If remediations are clear, Remediation Sprint proposes and waits for approval. If leadership wants drift watch, Quarterly Re-scan starts from the baseline you just created.