Direct assignments
The page states the limit at the top: direct assignments only. The list is not everyone who can ultimately open the site. The header shows inspection status, whether permissions are unique or inherited, the external sharing setting, and whether this account can change the site.
Sharing Disabled, External users only, External users and guests, or Existing external users is a configuration flag. It is not proof that an external person currently has access.
Five tabs
- Assignments — people and groups with a direct role on the site.
- Lists and libraries — lists and libraries on the site. Hidden and catalog lists are omitted.
- Administrators — site collection administrators, read only.
- Default groups — owners, members, and visitors.
- One person — direct roles already read in this session for one person.
Open a SharePoint group to see its members, and to add or remove a person or a security group when this account can edit that group. A SharePoint group cannot be added to another SharePoint group. A directory group, including a Microsoft 365 group, is not expanded and is not edited here. SharePoint system groups are shown and left unchanged.
Lists and libraries
Open a list or library for its direct role assignments. If the list inherits from the site, the assignments shown are the site’s direct roles.
- Stop inheriting, or restore inheritance. The change copies the current assignments and leaves nested items as they are. Inheritance cannot be changed when the library has more than 100,000 items, or when the item count could not be verified.
- Read sharing links for one file or folder URL in that library. The library is not crawled.
- Read one page of files and folders that have unique permissions. The page stops at 40 folders or 40 files.
- Check effective access for one person on that library. An Azure AD group is not expanded.