Forum Discussion
Default Site Collection Admins
It would seem that whenever a new OD4B account gets created, along with the real owner, two additional accounts are granted Site Collection administrator rights over that onedrive. One of these is an account for a backup solution, and the other is one of our SharePoint admins. I do not want the admin to have rights, I need to understand how the backup account is being given rights.
I thought that the default behavior was for the owner to be the only Site Collection Admin. Can anyone give me any pointers on where to look to find how these additional admins are set?
Thanks
- If you want to achieve this, you have to automate ODFB provisioning when you add users to your tenant. In this way, as you are controlling when ODFB per user is provisioned, you can add additional admins.
https://support.office.com/en-ie/article/pre-provision-onedrive-for-users-in-your-organization-ceef6623-f54f-404d-8ee3-3ce1e338db07Thanks, that useful to have.
However, I'm not looking for how to do this, but how not to do it. Accounts are being created with extra admins, and I don't want them to be.
- It's probably that there is a job running somewhere that's doing what Juan provided. You'll have to track down that job and see. You might be able to find the activity in the Audit logs in Security Center, but not sure how detailed that will be as far as where it's coming from, but you'll be able to see the user etc. assuming it's not connected under the local global admin.
