Permission sync issue between SharePoint Site and Groups

[RAOUF HARBEG]

Hi 

We have a situation where a newly add member (using Groups UI) to an Office 365 Group gets access denied when trying to access the SharePoint site although the member can access conversation and calendar items.

The access denied will go away eventually but this takes a unmesurable amount of time. Sometimes it's instant and sometimes it takes several hours!!

How  permisison work exactly between Office groups, Azure Ad and SharePoint. 

Thanks

[#2 · Accepted solution]

When you add a member to a Group, this action has to propagate to all workloads.

This needs time, which amount, as you noted, is not predictable.

So, be patient: the change will eventually propagate to all workloads...

[#3]

Salvatore is totally correct...the synchronization is not inmediate!

[#4]

Yes but it needs to be deterministic. Just telling people, who are anxious to access some content, to "wait a while" really doesn't help. It would even help if there was somewhere to look (AD, SP?) so we as the person granting access could confidently now say - OK, go for it, it is now working. I rely on https://xxxx-admin.sharepoint.com/_layouts/15/tenantprofileadmin/ProfMngr.asp - is this the best place to show that the guest account is now active on SP?