M365 Security Groups not working to control access to SharePoint Sites in multiple tenants.

Copper Contributor

I’m pulling my hair out and need someone to point out that I’ve missed something really simple.

The Scenario/Problem

In 4 different tenants, I’ve created a Communication SharePoint site and assigned an M365 Security Group as both the Site Admins and the Site Owners; which should be redundant, but it gives clarity to the members and visitors of who has access as they do not see the Site Admins. I’ve also added one user into the Site Owners to view the permissions and site settings.

After waiting for a reasonable period of time to allow for propagation, users added to the Security Group are denied access to the sites even though a check of the M365 Security Group’s permissions come back as “Full via the SharePoint Owners Group”.

If I add the users in question individually, they can access.

What I’ve Checked

- letting a longer propagation period to elapse
- double-checking the users added to the security group
- removing and re-adding the users to the security group
- double-checking the security group added to the site and any of its SharePoint groups
- removing and re-adding the security group to the site and any of its SharePoint groups
- clearing browsers cache’s
- incognito or private mode in browsers
- trying different browsers
- the Internet for answers (including ChatGPT and Bing AI) for hours, and hours…
- sacrificing a goat (its a stuffed Goat, does it still count?)

What I need from this group

A strong drink and a time machine. But really, I need someone, anyone, to tell me I’m not losing my mind in using security groups for managing site access at the Owner, Member and Visitor level. Everything I’m reading says it should (and either I’m hallucinating or I’ve done this before… just not recently) and yet 2 client and 2 dev tenants are proving that wrong. Has something changed recently? Am I missing something really simple? Am I alone in this problem?

Any help or direction would be greatly appreciated as I’m at my wit’s end.



2 Replies

@TREVOR_STYLER I noticed this just today too. It was working fine until recently. I use security groups to grant access to Power BI reports, Power Apps, and SharePoint sites - all working fine except for SharePoint. Really hoping this issue is solvable and temporary.

I've started to notice it failing in things like Audience targeting for SharePoint navigation