Permission management in SharePoint online

Hi Community,

One of the customer is currently tying to create SharePoint site and would like to know how to assign permission to the different type of SharePoint sites.

Let’s say for example,

In SharePoint Admin when they select the option to create a new site the listed options are Team site or Communication site.

If they select Team site it will create a new MS Team with a default document folder. If theyuse the sync tool to sync folders here and use the option to retain file and folder security in the migration tool it will migrate to the Documents folder as required with their AD security group assigned but any user who happens to be made an owner of the Team site by default will have access to all the folders and files migrated when in reality there may be files they are not to have access to. More worrying is the fact Team owners can delete a Team and with it all the files and folders uploaded to it.

They’re aware that there is a third option for a SharePoint site which is more of a custom site and there is a template to create a Document Centre but they’re looking for an advise on best practice. If they are going to migrate their data to SharePoint what is the best way (option) for creating the initial SharePoint site to host the data.

Any guidance would be of great help!