Forum Discussion

shafeeqts's avatar
shafeeqts
Copper Contributor
Dec 23, 2020

Access denied on Sharepoint admin center but user has SP admin role

Hi Team,

 

One of my user have SharePoint admin role but the user gets access denied when login to the Sharepoint admin center. Looks strange!!!!

 

Does someone ever have this issue? Any help will be appreciated.

 

Thanks.

  • If you added the permissions recently, it might just be some replication delay. Otherwise, best open a support case.

    • shafeeqts's avatar
      shafeeqts
      Copper Contributor
      It has been days since the role is assigned, It should be replicated now. But still no luck.
    • shafeeqts's avatar
      shafeeqts
      Copper Contributor

      I have removed all admin roles and enabled it again, and waited for one day!! Bingoo!! now it works.

      Anyway it is not good from Microsoft!

  • Guru Dutt's avatar
    Guru Dutt
    Copper Contributor

    Obviously this issue has been resolved for user. But i had a similar experience and thought it worthwhile to post my resolution IF it helps anyone in the future,

    Scenario: Global Admin creates new user from Admin center + Grants SP Admin Role.
    SP Admin able to log in use all office (E3 user). Sees Admin center and OneDrive and SP Admin centers, Clicking on it gives user 'Access denied'.

    Tried all below
    1. Waiting 24 hours > No change
    2. Removed and re-added user with same permissions > Same as above
    3. EVERYTHING short of bumping SP Admin to Global Admin > Same as above.

    Finally in my frustration I chanced upon the Azure AD. Nothing diff. All permissions reflected whatever Admin center showed. Just on a whim I decided to strip the admin of permissions and re-grant the SP Admin role.
    WORKED!!!!
    No logic but I said to myself IF anyone EVER complains - I'm doing this heading to AAD and changing permissions.

    No documentation anywhere. Not even a mention of possibility exists of a sync issue - So EXTREMELY frustrating (not to mention the ... hmmm wait 24 hours and try again.) Think Users or for that matter management would like to hear that from Admins .... smh
    Just for the record I had only had a default (onmicrosoft) domain

    Just hope this helps someone

Resources