"Everyone except external users" added to site Members group when Administrators are changed

%3CLINGO-SUB%20id%3D%22lingo-sub-455680%22%20slang%3D%22en-US%22%3E%22Everyone%20except%20external%20users%22%20added%20to%20site%20Members%20group%20when%20Administrators%20are%20changed%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-455680%22%20slang%3D%22en-US%22%3E%3CP%3EMy%20organization%20uses%20an%20OOTB%20SharePoint%20Team%20Site%20(not%20a%20group%20site)%20for%20sensitive%20HR%20content.%20We've%20removed%20all%20access%20except%20for%20a%20handful%20of%20users%20in%20the%20Members%20group.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhenever%20we%20add%20a%20user%20as%20a%20Site%20Collection%20Administrator%20through%20the%20admin%20portal%2C%20%22Everyone%20except%20external%20users%22%20gets%20added%20to%20the%20Members%20group%20automatically%2C%20effectively%20giving%20the%20entire%20organization%20access%20to%20sensitive%20content.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHas%20anyone%20experienced%20this%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-455680%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EPermissions%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-455830%22%20slang%3D%22en-US%22%3ERe%3A%20%22Everyone%20except%20external%20users%22%20added%20to%20site%20Members%20group%20when%20Administrators%20are%20c%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-455830%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F229939%22%20target%3D%22_blank%22%3E%40Paul%20Hermany%3C%2FA%3E%26nbsp%3B-%20I%20am%20having%20the%20same%20experience%20in%20our%20test%20environment%2C%20looks%20like%20a%20bug%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIt%20happens%20when%20you%20add%20or%20remove%20users%20from%20site%20collection%20administrators%20from%20the%20admin%20portal.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-481800%22%20slang%3D%22en-US%22%3ERe%3A%20%22Everyone%20except%20external%20users%22%20added%20to%20site%20Members%20group%20when%20Administrators%20are%20c%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-481800%22%20slang%3D%22en-US%22%3EI've%20had%20the%20same%20issue%20reported%20to%20me%20by%20a%20client%20this%20morning.%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

My organization uses an OOTB SharePoint Team Site (not a group site) for sensitive HR content. We've removed all access except for a handful of users in the Members group.

 

Whenever we add a user as a Site Collection Administrator through the admin portal, "Everyone except external users" gets added to the Members group automatically, effectively giving the entire organization access to sensitive content.

 

Has anyone experienced this?

2 Replies

@Paul Hermany - I am having the same experience in our test environment, looks like a bug

 

It happens when you add or remove users from site collection administrators from the admin portal.

Highlighted
I've had the same issue reported to me by a client this morning.