SOLVED

Azure AD sync account is adding admin rights to "All Users" on my sites

%3CLINGO-SUB%20id%3D%22lingo-sub-2028536%22%20slang%3D%22fr-FR%22%3EAzure%20AD%20sync%20account%20is%20adding%20admin%20rights%20to%20%22All%20Users%22%20on%20my%20sites%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2028536%22%20slang%3D%22fr-FR%22%3E%3CP%3EHello%20everyone%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAs%20per%20attached%20screenshot%2C%20saying%20Collection%20website%20administrator%20added.%20That%20account%20is%20adding%20itself%20and%20the%20%22All%20Users%22%20group%20to%20sites%20admin.%20I've%20tried%20to%20manually%20remove%20both%20%22All%20Users%22%20and%20azuread%20account%20from%20admin%20but%20it%20just%20adds%20itself%20and%20the%20group%20back%20a%20few%20days%20later.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMy%20sharepoint%20is%20not%20in%20use%20yet%2C%20and%20I'd%20like%20if%20all%20my%20users%20could%20not%20edit%20my%20pages.%20Can't%20figure%20out%20where%20that%20automatic%20option%20would%20be%2C%20I've%20searched%20all%20classic%20and%20new%20sharepoint%20admin%20center%20options%2C%20maybe%20I%20missed%20something.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20in%20advance%20for%20your%20help.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2028536%22%20slang%3D%22fr-FR%22%3E%3CLINGO-LABEL%3EPermissions%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESharePoint%20online%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESites%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2035531%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20AD%20sync%20account%20is%20adding%20admin%20rights%20to%20%22All%20Users%22%20on%20my%20sites%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2035531%22%20slang%3D%22en-US%22%3E%3CP%3EI%20found%20the%20source%20of%20my%20problem.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBy%20luck%2C%20I%20guess%2C%20I%20had%20another%20issue%20on%20my%20Veeam%20for%20Office%20365%20and%20while%20resolving%20it%20I%20saw%20that%20somewhere%20there%20on%20the%20Backup%20accounts%2C%20the%20group%20All%20users%20was%20selected.%3C%2FP%3E%3CP%3EThat%20was%20it%20causing%20the%20group%20to%20be%20added%20every%20night.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENever%20would%20have%20thought%20of%20going%20check%20that%20there%20if%20it%20weren't%20for%20the%20issue%20I%20had.%20Hope%20someday%20this%20might%20help%20someone%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

Hello everyone,

 

As per attached screenshot, saying Collection site administrator added. That account is adding itself and the "All Users" group to sites admin. I've tried to manually remove both "All Users" and azuread account from admin but it just adds itself and the group back a few days later.

 

My sharepoint is not in use yet, and I'd like if all my users could not edit my pages. Can't figure out where that automatic option would be, I've searched all classic and new sharepoint admin center options, maybe I missed something.

 

Thanks in advance for your help.

1 Reply
Best Response confirmed by ADessimoz (New Contributor)
Solution

I found the source of my problem.

 

By luck, I guess, I had another issue on my Veeam for Office 365 and while resolving it I saw that somewhere there on the Backup accounts, the group All users was selected.

That was it causing the group to be added every night.

 

Never would have thought of going check that there if it weren't for the issue I had. Hope someday this might help someone