Who has access to my sharepoint online site beyond the configured groups & permissions ?

%3CLINGO-SUB%20id%3D%22lingo-sub-2449319%22%20slang%3D%22en-US%22%3EWho%20has%20access%20to%20my%20sharepoint%20online%20site%20beyond%20the%20configured%20groups%20%26amp%3B%20permissions%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2449319%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20a%20confidential%20sharepoint%20site%20with%20owners%20and%20members%20configured%20and%20no%20visitors.%20Outside%20of%20the%20people%20in%20the%20owners%20and%20members%20groups%2C%20who%20else%20potentially%20has%20access%20to%20the%20site%20-%20for%20example%20admins%20configured%20in%20O365%20or%20AAD%20-%20and%20how%20to%20remove%20their%20access%20for%20this%20site%20only%20%3F%20If%20not%20possible%2C%20what%20is%20the%20recommended%20approach%20to%20restrict%20access%20to%20only%20the%20few%20people%20in%20the%20owners%20and%20members%20groups%20%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EStephane%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2449319%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EPermissions%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESharePoint%20Online%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESites%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2450042%22%20slang%3D%22en-US%22%3ERe%3A%20Who%20has%20access%20to%20my%20sharepoint%20online%20site%20beyond%20the%20configured%20groups%20%26amp%3B%20permissions%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2450042%22%20slang%3D%22en-US%22%3EHi%2C%20usually%20the%20admins%20as%20you%20already%20know.%20Not%20sure%20on%20the%20use%20case%20here%20but%20you%20should%20have%20a%20look%20at%20PIM%20and%20Sensitivity%20labels%20at%20least.%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fprivileged-identity-management%2Fpim-configure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fprivileged-identity-management%2Fpim-configure%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fcompliance%2Fsensitivity-labels-teams-groups-sites%3Fview%3Do365-worldwide%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fcompliance%2Fsensitivity-labels-teams-groups-sites%3Fview%3Do365-worldwide%3C%2FA%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

Hi,

 

I have a confidential sharepoint site with owners and members configured and no visitors. Outside of the people in the owners and members groups, who else potentially has access to the site - for example admins configured in O365 or AAD - and how to remove their access for this site only ? If not possible, what is the recommended approach to restrict access to only the few people in the owners and members groups ?

 

Stephane

1 Reply