SOLVED

Strange behavior in Hub site permissions

%3CLINGO-SUB%20id%3D%22lingo-sub-213324%22%20slang%3D%22en-US%22%3EStrange%20behavior%20in%20Hub%20site%20permissions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-213324%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3EWe%20are%20experiencing%20some%20strange%20issues%20after%20associating%20some%20sites%20to%20a%20hub%20site.%20Here's%20the%20thing%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20have%20four%20associated%20sites.%20When%20creating%20news%20on%20these%20sites%2C%20they%20are%20aggregated%20to%20the%20hub%20site%20(as%20expected).%26nbsp%3B%3C%2FP%3E%3CP%3EOne%20user%20sees%20all%20the%20news%20articles%20on%20the%20hub%20sites%2C%20but%20several%20other%20users%20only%20see%20some%20of%20them%20(or%20maybe%20no%20news%20at%20all).%3C%2FP%3E%3CP%3EWhen%20opening%20the%20home%20page%20on%20the%20hub%20site%20in%20Edit%20mode%2C%20we%20can%20see%20the%20problem%20in%20the%20News%20web%20part.%20The%20one%20user%20that%20sees%20all%20the%20news%2C%20gets%20all%20the%20associated%20sites%20listed%20under%20the%20%22Sites%20associated%20with%20this%20hub%22%20property.%20But%20the%20other%20users%20only%20see%20some%20(or%20none)%20sites!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnyone%20have%20any%20idea%20what%20might%20cause%20this%3F%3C%2FP%3E%3CP%3EIt%20is%20worth%20pointing%20out%20that%20all%20the%20users%20have%20been%20added%20to%20the%20associated%20sites%2C%20and%20have%20Full%20Control%20to%20all%20of%20them.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%2C%3C%2FP%3E%3CP%3EFrank%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-213324%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ESharePoint%20Online%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-267540%22%20slang%3D%22en-US%22%3ERe%3A%20Strange%20behavior%20in%20Hub%20site%20permissions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-267540%22%20slang%3D%22en-US%22%3E%3CP%3EHow%20did%20you%20go%20about%20giving%20users%20permissions%20to%20Site%20Pages%20and%20Assets%3F%26nbsp%3B%20Or%20better%20yet%2C%20have%20you%20found%20another%20way%20to%20do%20this%3F%26nbsp%3B%20I%20am%20ok%20if%20the%20user%20has%20access%20to%20the%20site%20as%20long%20as%20they%20do%20not%20have%20access%20to%20their%20files%20(document%20library)%20as%20this%20is%20where%20confidential%20information%20will%20be%20stored.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-215258%22%20slang%3D%22en-US%22%3ERe%3A%20Strange%20behavior%20in%20Hub%20site%20permissions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-215258%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20Christopher%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20can%20confirm%20that%20this%20is%20the%20same%20issue%20we're%20facing.%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you%20for%20your%20help!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EKind%20Regards%2C%3C%2FP%3E%3CP%3EFrank%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-214457%22%20slang%3D%22en-US%22%3ERe%3A%20Strange%20behavior%20in%20Hub%20site%20permissions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-214457%22%20slang%3D%22en-US%22%3EHere%20is%20the%20post.%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FSharePoint%2FUser-In-Owner-Role-No-Search-Results%2Fm-p%2F206311%22%20target%3D%22_blank%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FSharePoint%2FUser-In-Owner-Role-No-Search-Results%2Fm-p%2F206311%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3CBR%20%2F%3EI'm%20almost%20betting%20this%20is%20related%2C%20due%20to%20the%20fact%20that%20you%20added%20yourself%20to%20the%20actual%20group%20which%20adds%20them%20to%20the%20member%20group%20on%20the%20site%20vs.%20owner%20group.%20Try%20adding%20yourself%20to%20the%20members%20group%20on%20the%20other%20sites%2C%20or%20others%20instead%20of%20owners%20and%20see%20if%20it%20fixes%20the%20issue.%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-214344%22%20slang%3D%22en-US%22%3ERe%3A%20Strange%20behavior%20in%20Hub%20site%20permissions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-214344%22%20slang%3D%22en-US%22%3EIt%20might%20have%20to%20do%20with%20a%20permission%20bug%20on%20group%20sites.%20Dean%20or%20John%20had%20this%20issue%20recently%20and%20put%20a%20bug%20with%20Microsoft%20where%20they%20couldn%E2%80%99t%20search%20when%20they%20were%20in%20the%20Sharepoint%20owners%20group%20of%20a%20site%20or%20something%20similar.%20Let%20me%20see%20if%20I%20get%20a%20chance%20to%20find%20that%20post%20but%20might%20be%20related.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-214156%22%20slang%3D%22en-US%22%3ERe%3A%20Strange%20behavior%20in%20Hub%20site%20permissions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-214156%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20again%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20access%20all%20these%20sites%20quite%20frequently%20all%20day%2C%20and%20have%20all%20the%20necessary%20permissions.%20If%20I%20open%20the%20sites%2C%20I%20can%20see%20the%20news%20in%20the%20web%20part%20on%20the%20front%20page.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20tested%20with%20granting%20myself%20permissions%20on%20one%20of%20the%20sites.%20This%20is%20basically%20re-assigning%20permissions%2C%20because%20I%20already%20have%20Full%20control.%26nbsp%3B%3C%2FP%3E%3CP%3EI%20receive%20the%20email%20Welcoming%20me%20to%20the%20group%20site%20also%2C%20so%20all%20good%20so%20far.%3C%2FP%3E%3CP%3EI%20go%20up%20to%20the%20hub%20site%20and%20edit%20the%20News%20web%20part%2C%20and%20voila!%20The%20site%20is%20now%20displayed%20under%20%22Sites%20associated%20with%20the%20Hub%20site%22.%20And%20if%20I%20check%20it%2C%20the%20news%20from%20that%20site%20is%20also%20being%20aggregated%20up%20to%20the%20hub%20site.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20idea%20what%20might%20cause%20this%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAside%3A%20The%20sites%20were%20originally%20created%20by%20an%20administrator%20back%20in%20early%20June.%20Could%20that%20have%20something%20to%20do%20with%20it%3F%20Is%20it%20possible%20she%20created%20the%20groups%20and%20its%20associated%20sites%20using%20Outlook%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-213971%22%20slang%3D%22en-US%22%3ERe%3A%20Strange%20behavior%20in%20Hub%20site%20permissions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-213971%22%20slang%3D%22en-US%22%3EYeah%20Frank%20said%20they%20have%20full%20control%20to%20those%20sites%20with%20the%20news%20on%20them%3F%20Make%20sure%20that%20you%20didn't%20break%20inheritance%20to%20the%20Site%20pages%20libraries%20would%20be%20one%20other%20thing%20you%20can%20check%20to%20make%20sure%20they%20have%20permissions%20to.%3CBR%20%2F%3E%3CBR%20%2F%3EAlso%2C%20you%20need%20to%20follow%20%2F%20visit%20sites%20I%20think%20for%20them%20to%20show%20up%20in%20that%20list%20for%20filters%20on%20the%20hub%20news%20settings%20so%20some%20users%20may%20not%20show%20up%20here.%3CBR%20%2F%3E%3CBR%20%2F%3EIf%20you%20go%20to%20each%20site%20as%20the%20users%20that%20don't%20see%20news%20in%20the%20hub%2C%20can%20they%20access%20and%20see%20the%20news%20on%20those%20sites%3F%3CBR%20%2F%3E%3CBR%20%2F%3EYou%20may%20end%20up%20needing%20to%20re-index%20your%20tenant%20possibly%20as%20much%20of%20this%20is%20based%20around%20search%20index%2Fgraph.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-213967%22%20slang%3D%22en-US%22%3ERe%3A%20Strange%20behavior%20in%20Hub%20site%20permissions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-213967%22%20slang%3D%22en-US%22%3E%3CP%3EThis%20may%20have%20already%20come%20up%20but%2C%20if%20the%20user%20does%20not%20have%20access%20to%20the%20site%2C%20they%20will%20not%20see%20news%20from%20that%20site%20when%20aggregated%20to%20the%20Hub%20Site.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHowever%2C%20you%20can%20get%20around%20that%20by%20giving%20them%20read%20access%20to%20Site%20Pages%20and%20Site%20Assets%20%26gt%3B%20Site%20Pages%20on%20the%20associated%20site.%26nbsp%3B%3C%2FP%3E%3CP%3EDisclaimer%3A%26nbsp%3B%20This%20may%20not%20be%20a%20best%20practice%20but%2C%20it's%20one%20we%20currently%20employ%20to%20solve%20for%20HR-related%20news%20in%20our%20org%20as%20we%20cannot%20give%20everyone%20access%20to%20the%20HR%20site%2C%20for%20example.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-213629%22%20slang%3D%22en-US%22%3ERe%3A%20Strange%20behavior%20in%20Hub%20site%20permissions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-213629%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you%20for%20your%20reply%2C%20Christopher!%3CBR%20%2F%3EI%20do%20have%20access%20to%20the%20root%20SharePoint%20site%2C%20since%20the%20company's%20main%20intranet%20is%20located%20there.%20However%2C%20I%20only%20have%20Read%20access%20(Visitors%20group).%3CBR%20%2F%3EDo%20I%20need%20more%20access%3F%20If%20not%2C%20can%20anyone%20see%20what%20else%20might%20cause%20this%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EEDIT%3A%20The%20employee%20that%20actually%20see%20all%20the%20sites%2C%20also%20only%20have%20Read%20access%20on%20the%20root%20site.%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EThanks%20again%2C%3CBR%20%2F%3EFrank%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-213417%22%20slang%3D%22en-US%22%3ERe%3A%20Strange%20behavior%20in%20Hub%20site%20permissions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-213417%22%20slang%3D%22en-US%22%3ECheck%20your%20permissions%20on%20your%20root%20SharePoint%20site%20under%20%3CA%20href%3D%22https%3A%2F%2Ftenant.sharepoint.com%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Ftenant.sharepoint.com%2F%3C%2FA%3E%3CBR%20%2F%3EIf%20your%20users%20don't%20have%20access%20to%20this%20site%2C%20it's%20caused%20issues%20with%20Hub%20rollups.%3C%2FLINGO-BODY%3E
Occasional Contributor

Hi,

We are experiencing some strange issues after associating some sites to a hub site. Here's the thing:

 

We have four associated sites. When creating news on these sites, they are aggregated to the hub site (as expected). 

One user sees all the news articles on the hub sites, but several other users only see some of them (or maybe no news at all).

When opening the home page on the hub site in Edit mode, we can see the problem in the News web part. The one user that sees all the news, gets all the associated sites listed under the "Sites associated with this hub" property. But the other users only see some (or none) sites!

 

Anyone have any idea what might cause this?

It is worth pointing out that all the users have been added to the associated sites, and have Full Control to all of them.

 

Thanks,

Frank

10 Replies
Check your permissions on your root SharePoint site under https://tenant.sharepoint.com/
If your users don't have access to this site, it's caused issues with Hub rollups.

Thank you for your reply, Christopher!
I do have access to the root SharePoint site, since the company's main intranet is located there. However, I only have Read access (Visitors group).
Do I need more access? If not, can anyone see what else might cause this?

 

EDIT: The employee that actually see all the sites, also only have Read access on the root site.


Thanks again,
Frank

This may have already come up but, if the user does not have access to the site, they will not see news from that site when aggregated to the Hub Site. 

 

However, you can get around that by giving them read access to Site Pages and Site Assets > Site Pages on the associated site. 

Disclaimer:  This may not be a best practice but, it's one we currently employ to solve for HR-related news in our org as we cannot give everyone access to the HR site, for example.

Yeah Frank said they have full control to those sites with the news on them? Make sure that you didn't break inheritance to the Site pages libraries would be one other thing you can check to make sure they have permissions to.

Also, you need to follow / visit sites I think for them to show up in that list for filters on the hub news settings so some users may not show up here.

If you go to each site as the users that don't see news in the hub, can they access and see the news on those sites?

You may end up needing to re-index your tenant possibly as much of this is based around search index/graph.

Hi again,

 

I access all these sites quite frequently all day, and have all the necessary permissions. If I open the sites, I can see the news in the web part on the front page.

 

I tested with granting myself permissions on one of the sites. This is basically re-assigning permissions, because I already have Full control. 

I receive the email Welcoming me to the group site also, so all good so far.

I go up to the hub site and edit the News web part, and voila! The site is now displayed under "Sites associated with the Hub site". And if I check it, the news from that site is also being aggregated up to the hub site.

 

Any idea what might cause this? 

 

Aside: The sites were originally created by an administrator back in early June. Could that have something to do with it? Is it possible she created the groups and its associated sites using Outlook?

It might have to do with a permission bug on group sites. Dean or John had this issue recently and put a bug with Microsoft where they couldn’t search when they were in the Sharepoint owners group of a site or something similar. Let me see if I get a chance to find that post but might be related.
best response confirmed by Frank-Ove Kristiansen (Occasional Contributor)
Solution
Here is the post. https://techcommunity.microsoft.com/t5/SharePoint/User-In-Owner-Role-No-Search-Results/m-p/206311


I'm almost betting this is related, due to the fact that you added yourself to the actual group which adds them to the member group on the site vs. owner group. Try adding yourself to the members group on the other sites, or others instead of owners and see if it fixes the issue.

Thanks Christopher,

 

I can confirm that this is the same issue we're facing. 

Thank you for your help!

 

Kind Regards,

Frank

How did you go about giving users permissions to Site Pages and Assets?  Or better yet, have you found another way to do this?  I am ok if the user has access to the site as long as they do not have access to their files (document library) as this is where confidential information will be stored. 

 

 

I confirm we are getting the same behavior