The “SharePoint site drilldowns” report shows, for each SharePoint site in the tenant, per-site aggregates for unique permissions, external exposure, and versioning and storage hotspots. These columns can be filtered and sorted to identify higher-risk sites, or sites that require higher-priority review. From each counter, it is possible to click through to either the “Items with Unique Permissions report” or the “SharePoint item-level report” report, pre-filtered to the selected site and risk subset.

Below is a list of available columns, organized by category.
Unique-permission presence and quantity
Columns available:
Has items with unique permissions (clickable)
- Boolean indicator showing whether the site contains at least one item with unique permissions (true/false).
-
When clicked: opens “Items with Unique Permissions” pre-filtered by:
- Site = selected site
- Unique permissions = True
Items with unique permissions (clickable)
- Number of items in the site that have unique permissions.
-
When clicked: opens “Items with Unique Permissions” pre-filtered by:
- Site = selected site
- Unique permissions = True
% of items with unique permissions
- Percentage of items in the site that have unique permissions.
Total items (clickable)
- Total number of items (files and folders) in the site.
-
When clicked: opens “SharePoint item-level” pre-filtered by:
- Site = selected site
External exposure and link-based risk
Columns available:
Unique items shared externally (clickable)
- Items with unique permissions that are shared externally.
-
When clicked: opens “Items with Unique Permissions” pre-filtered by:
- Site = selected site
- Is shared externally = True
Unique items with “Anyone” links (clickable)
- Items with unique permissions that have at least one “Anyone” sharing link.
-
When clicked: opens “Items with Unique Permissions” pre-filtered by:
- Site = selected site
- Sharing type = Anyone (or final label/alias)
Unique items with sharing links (clickable)
- Items with unique permissions that have one or more sharing links.
-
When clicked: opens “Items with Unique Permissions” pre-filtered by:
- Site = selected site
- Access type contains “Sharing link” (and/or non-empty “Sharing type”)
Unique items with guest who can edit (clickable)
- Items with unique permissions where guests have “Can edit” rights.
-
When clicked: opens “Items with Unique Permissions” pre-filtered by:
- Site = selected site
- Guest with Can edit = True
Has guest who can edit (clickable)
- Boolean indicator that at least one item in the site grants “Can edit” rights to guests (true/false).
-
When clicked: opens “Items with Unique Permissions” pre-filtered by:
- Site = selected site
- Guest with Can edit = True
Operational signals (recent change activity)
Columns available:
Unique items created in last 7 days (clickable)
- Items with unique permissions that were created in the last 7 days.
-
When clicked: opens “Items with Unique Permissions” pre-filtered by:
- Site = selected site
- Created date = Last 7 days
Unique items modified in last 7 days (clickable)
- Items with unique permissions whose latest version was modified in the last 7 days.
-
When clicked: opens “Items with Unique Permissions” pre-filtered by:
- Site = selected site
- Last modified date = Last 7 days
Storage and versioning hotspots
Columns available:
Total size of latest item versions (GB) (clickable)
- Aggregate size of all items in the site.
-
When clicked: opens “SharePoint item-level” pre-filtered by:
- Site = selected site
Version storage consumed (GB) (clickable)
- Aggregate storage consumed by versions in the site.
-
When clicked: opens “SharePoint item-level” pre-filtered by:
- Site = selected site