onedrive list of admin

[Bhavpreet Bains]

Hello,

We have a user who was accidentally added as site collection admin to various OneDrive accounts. Is it possible to pull a list of all site collection admin for all OneDrive accounts?

I've tried using the following cmdlet on one of the site before creating the full script.

get-spouser -Site "<site url>" | select DisplayName, LoginName, UserType, IsSiteAdmin

The above returns all site users with isSiteAdmin as false unless I grant my admin account as site collection admin which is not ideal solution. 

Running Get-Sposite returns only primary site collection admin. 

Which should be the best way to pull list of all site collection admins?

Thank you.

B

[#2]

Try this: https://jerryyasir.wordpress.com/2017/05/31/get-site-collection-administrators-for-sharepoint-online...

[#3]

Hello Juan,

I've tried the following cmdlet but it doesn't return isSiteAdmin true.
get-spouser -Site "<site url>" | select DisplayName, LoginName, UserType, IsSiteAdmin

[#4]

I’m playing with a script but so far all I get is all the onedrive sites and the original corresponding owner, even if I added someone else as owner as well.
IsSiteAdmin doesn’t return any value

[#5]

Have not looked at the script yet, but you have to be a owner yourself to be able to read the other site collection admins. Not sure if that is the problem.

[#6]

Hello Joe,

I don't want to give an account site collection admin access to random sites.

[#7]

Yup, Totally understand! I didn't want to do that as well. But that was the only way I could get it working. Would be keen to know, if someone else have a different solution.

[#8]

I wish I had a solution, but I don't.  I can just add a "Me Too".  The only thing I can think of is to write a script that does the following:

1. Check the admins
2. If I get results, great
3. If I get no results, grant myself access
4. Get the list
5. Remove my access

I'm amazed that Get-SPOSite and Get-SPOUser have this limitation for Global admins and SharePoint admins, and that Microsoft hasn't worked around this by providing an Audit report from the Office 365 or SharePoint Admin sites.

[#9]

@Alex Carlock 

Import-Module Microsoft.Online.SharePoint.PowerShell -DisableNameChecking

$AdminAccount = "administrator@company.com"
$AdminCenterURL = "https://company-admin.sharepoint.com/"


#Connect to SharePoint Online Admin Center
Connect-SPOService -Url $AdminCenterURL
 
#Get All OneDrive for Business Sites in the Tenant
$OneDriveSites = Get-SPOSite -Limit ALL -includepersonalsite $True -Filter "Url -like '-my.sharepoint.com/personal/'"
      
#Loop through each OneDrive Site
Foreach($Site in $OneDriveSites)
{
    Write-host "Scanning site:"$Site.Url -f Yellow
    try{
        $checkadmin = Get-SPOUser -Site $Site.Url | Where {$_.IsSiteAdmin -eq $true -and $_.LoginName -eq $AdminAccount}
        $setAdmin = $false;

        #Add Temp Site Admin
        if($checkadmin.Count -eq 0){
            #Write-host "Add Temp Admin:"$Site.URL -f Gray
            Set-SPOUser -Site $Site -LoginName $AdminAccount -IsSiteCollectionAdmin $True | Out-Null            
            $setAdmin = $true
        }
    }catch{
        #Write-Host "Error:" $_.Exception.Message
        if($_.Exception.Message -like "Access is denied*"){
            #Write-host "Add Temp Admin:"$Site.URL -f Gray
            Set-SPOUser -Site $Site -LoginName $AdminAccount -IsSiteCollectionAdmin $True | Out-Null            
            $setAdmin = $true
        }
    }
 
    #Get All Site Collection Administrators
    $SiteAdmins = Get-SPOUser -Site $Site.Url | Where {$_.IsSiteAdmin -eq $true -and $_.LoginName -ne $AdminAccount -and $_.LoginName -ne $Site.Owner}

    if($SiteAdmins.Count -gt 0){
 
        #Iterate through each admin
        Foreach($Admin in $SiteAdmins)
        {
            Write-host "Found other Admin:"$Admin.LoginName -f Blue
        }
    }

    #Remove Temp Site Administrator if added
    if($setAdmin -eq $true){        
        #Write-host "Remove Temp Admin:"$Site.URL -f Gray    
        Set-SPOUser -site $Site -LoginName $AdminAccount -IsSiteCollectionAdmin $False | Out-Null
    }
}

[#10]

@adrianhalid 

how do we pipe this to a csv?

[#11]

@divadiow 

Did you ever figure out a way to send the results to a csv ? 

Thanks !

[#12]

@Lisa Gentry 

Where ever you see a Write-Host you could just output to a file on your disk.

Try using Add-Content or Out-File.

Add-Content (Microsoft.PowerShell.Management) - PowerShell | Microsoft Docs

Out-File (Microsoft.PowerShell.Utility) - PowerShell | Microsoft Docs