Read-only permissions and Entra group audit for a site — who can get in, and how. The site-level report is free; Pro goes below site level.
Full walkthrough, screenshots, FAQ and its own pricing — the version inside TenantTools365 is the same engine, unlocked by the suite key.
The shipped web part on a real SharePoint page.
Every user, group and sharing link, with the access chain
100% read-only — zero write calls in the shipped package
Free: the full site-level report, no key. Pro: item-level sweep, sharing links, org-wide flags, CSV export
Every SharePoint call this tool's code makes — the same table checked by the build and by the verifier script in the download.
| Call | Method | Destructive? |
|---|---|---|
| …/roleassignments, …/siteusers | GET | No — read only, no writes at all |
Full cross-tool table and the shipped verifier script are on the main safety audit page.