Who has access to my sharepoint online site beyond the configured groups & permissions ?

[StephaneBouillon]

Hi,

I have a confidential sharepoint site with owners and members configured and no visitors. Outside of the people in the owners and members groups, who else potentially has access to the site - for example admins configured in O365 or AAD - and how to remove their access for this site only ? If not possible, what is the recommended approach to restrict access to only the few people in the owners and members groups ?

Stephane

[#2]

Hi, usually the admins as you already know. Not sure on the use case here but you should have a look at PIM and Sensitivity labels at least.

https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure

https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-teams-groups-sites?view...