Export the Full control, permission type and modified date, across sub sites on SharePoint online Site collection

<#*****-----------------------------------------------------------------------******

Author          -> Shiv Mangal Singh

Date            -> 3rd April - 2021

Description     -> This Script will generate the Full control, permission type and modified date, across sub sites on SharePoint online Site collection.

******-----------------------------------------------------------------------******#

##Variables 

$SiteURL = "https://contososmstomar93.sharepoint.com/sites/PowerAppsSMS"

$FileUrl = "D:\PowerShell\Report\SubSites_Report.csv"

#Connect to Site  Collection

Connect-PnPonline -Url $SiteURL -UseWebLogin

 

#Get the web

$Site = Get-PnPWeb

# Create header for Report in CSV file

"Site Url `t Site Modified `t SharePoint Group/ Direct Permission `t GroupUser/ User `t PermissionType `t PermissionLevel " | out-file $FileUrl

#Get the Webs/ sub sites

 $Web = Get-PnPSubWebs -Recurse -Includes RoleAssignments, LastItemModifiedDate

# Loop through each sub sites 

foreach($Subsite in $Web)

{

foreach($RoleAssignment in $Subsite.RoleAssignments)

{

    #Get the Permission Levels assigned and Member

    Get-PnPProperty -ClientObject $RoleAssignment -Property RoleDefinitionBindings, Member

     

    #Get the Full control permission Level

    $PermissionLevels = ($RoleAssignment.RoleDefinitionBindings | Select -ExpandProperty Name | Where { $_ -eq "Full Control"} ) -join ","

     

    #Leave Principals with no Permissions

    If($PermissionLevels.Length -eq 0) 

    {

    Continue

    }

 

 #Check direct permissions

    $PermissionType = $RoleAssignment.Member.PrincipalType

 

 #Get SharePoint group members

    If($PermissionType -eq "SharePointGroup")

    {

        #Get Group Members

        $GroupMembers = Get-PnPGroupMembers -Identity $RoleAssignment.Member.LoginName

                   

        #Leave Empty Groups

        If($GroupMembers.count -eq 0)

        { 

        Continue 

        }

        $GroupUsers = ($GroupMembers | Select -ExpandProperty LoginName | Where { $_ -ne "SHAREPOINT\system"}) -join "; "

   

   # Send the Data to Report file, from SharePoint Group

    "$($Subsite.Url) `t $($Subsite.LastItemModifiedDate) `t $($RoleAssignment.Member.Title) `t $($GroupUsers) `t $($PermissionType) `t $($PermissionLevels)" | Out-File $FileUrl -Append

    }

   else

     {

     # Send the Data to Report file, from direct user permission

  

      "$($Subsite.Url) `t $($Subsite.LastItemModifiedDate) `t Direct Permission `t $($RoleAssignment.Member.LoginName) `t $($PermissionType) `t $($PermissionLevels)" | Out-File $FileUrl -Append

     }

    }

    }