Library Permissions - Unique permissions not to inlcude Owners

%3CLINGO-SUB%20id%3D%22lingo-sub-3363200%22%20slang%3D%22en-US%22%3ELibrary%20Permissions%20-%20Unique%20permissions%20not%20to%20inlcude%20Owners%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3363200%22%20slang%3D%22en-US%22%3E%3CP%3EHi!%3C%2FP%3E%3CP%3EI%20created%20a%20site%20for%20one%20of%20our%20departments.%20This%20site%20has%203%20Owners%20(including%20me%20for%20another%20week%20while%20people%20gets%20used%20to%20the%20site)%20and%207%20Members.%20For%20most%20of%20the%20site%2C%20everybody%20(members%20and%20owners)%20have%20access%20to%20all%20folders%2C%20files%2C%20lists.%3C%2FP%3E%3CP%3EThere%20is%20only%201%20folder%20where%20I%20had%20to%20Create%20unique%20permissions.%20this%20folder%20is%20only%20to%20be%20accessed%20by%201%20owner%20and%202%20memebers.%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20i%20went%20to%20the%20Library%20permissions.%20Stopped%20inheriting%2C%20removed%20all%20the%20groups%20and%20the%203%20users%20that%20are%20allowed%20access.%3C%2FP%3E%3CP%3EBut%20then%20i%20realised%20that%20I%20(owner)%20still%20have%20access%20to%20that%20library%20(though%20i%20am%20not%20on%20the%20Unique%20permissions%20we%20setted)%26nbsp%3B%3C%2FP%3E%3CP%3Eis%20there%20a%20way%20to%20stop%20that%3F%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22MVCuser_0-1652343349302.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F371112i0E8B2BA7F6F3E461%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22MVCuser_0-1652343349302.png%22%20alt%3D%22MVCuser_0-1652343349302.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-3363200%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EDeveloper%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EDocument%20Library%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Efiles%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EPermissions%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESharePoint%20Online%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESites%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3369198%22%20slang%3D%22en-US%22%3ERe%3A%20Library%20Permissions%20-%20Unique%20permissions%20not%20to%20inlcude%20Owners%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3369198%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F1051793%22%20target%3D%22_blank%22%3E%40MVCuser%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20foresee%202%20possibilities%3A%3C%2FP%3E%3CUL%3E%3CLI%3EYour%20account%20is%20part%20of%20the%20Site%20Collection%20Administrators%20for%20this%20specific%20site%3C%2FLI%3E%3CLI%3EYour%20account%20has%26nbsp%3B%3CSPAN%3ESharePoint%20Admins%20role%20assigned%3C%2FSPAN%3E%3C%2FLI%3E%3C%2FUL%3E%3CP%3E%3CSPAN%3ECould%20you%20check%20if%20it's%20the%20case%20%3F%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3369226%22%20slang%3D%22en-US%22%3ERe%3A%20Library%20Permissions%20-%20Unique%20permissions%20not%20to%20inlcude%20Owners%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3369226%22%20slang%3D%22en-US%22%3EHi.%3CBR%20%2F%3EYes%2C%20my%20account%20is%20showing%20as%20Admin%20and%20owner%20(though%20i%20want%20to%20remove%20myself%20as%20admin%20onces%20the%20users%20are%20all%20happy%20with%20the%20site).%20is%20that%20the%20problme%20then%3F%20can%20i%20remove%20myseld%20as%20admin%20but%20still%20be%20an%20owner%3F%3CBR%20%2F%3EThank%20you%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3369362%22%20slang%3D%22en-US%22%3ERe%3A%20Library%20Permissions%20-%20Unique%20permissions%20not%20to%20inlcude%20Owners%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3369362%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F1051793%22%20target%3D%22_blank%22%3E%40MVCuser%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYes.%20It's%20possible%20to%20be%20an%20Owner%20of%20a%20site%20without%20being%20a%20Site%20Collection%20Admin.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20order%20of%20%3CEM%3E%22precedence%22%3C%2FEM%3E%2C%26nbsp%3BUsers%20having%20SharePoint%20Admin%20role%20in%20M365%20or%26nbsp%3BSite%20Collection%20Admin%20permission%2C%20have%20the%20highest%20possible%20privileges%20%3CEM%3E(above%20the%20Owner%20which%20has%20Full%20Control%20permission%20on%20the%20target%20site)%3C%2FEM%3E.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBy%20design%2C%20they%20have%20access%20to%20all%20contents%20in%20SharePoint%20despite%20the%20permission%20level%20assigned%3C%2FP%3E%3C%2FLINGO-BODY%3E
Contributor

Hi!

I created a site for one of our departments. This site has 3 Owners (including me for another week while people gets used to the site) and 7 Members. For most of the site, everybody (members and owners) have access to all folders, files, lists.

There is only 1 folder where I had to Create unique permissions. this folder is only to be accessed by 1 owner and 2 memebers. 

So i went to the Library permissions. Stopped inheriting, removed all the groups and the 3 users that are allowed access.

But then i realised that I (owner) still have access to that library (though i am not on the Unique permissions we setted) 

is there a way to stop that?

MVCuser_0-1652343349302.png

 

3 Replies

@MVCuser 

 

I foresee 2 possibilities:

  • Your account is part of the Site Collection Administrators for this specific site
  • Your account has SharePoint Admins role assigned

Could you check if it's the case ?

Hi.
Yes, my account is showing as Admin and owner (though i want to remove myself as admin onces the users are all happy with the site). is that the problme then? can i remove myseld as admin but still be an owner?
Thank you

@MVCuser 

 

Yes. It's possible to be an Owner of a site without being a Site Collection Admin.

 

In order of "precedence", Users having SharePoint Admin role in M365 or Site Collection Admin permission, have the highest possible privileges (above the Owner which has Full Control permission on the target site).

 

By design, they have access to all contents in SharePoint despite the permission level assigned