I find that managing permissions in SharePoint is daunting. Is there anybody who uses a permission management application such as SPdockit? If so, can you offer some insights on applications that you use? Thanks.
You can use this link for any doubts in spdockit:
spdockit.com/blog/permissions-management-sharepoint-2013-part-two.
You can use a PS script to export all permissions for a site collection.
I definitely agree. But I do have a need to be able to look up a user (or group) and see exactly what permission they have on the entire site, etc. There is no easy way to do that type of reporting with OOB SharePoint.
It’s best to manage the permissions in AD as much as possible using groups and roles, instead of people specific permissions. That’s just my opinion.