Recently create Global Admin account is now showing in all SharePoint/One Drive

Josh Stokes 20 Reputation points
2024-07-08T01:12:12.1933333+00:00

Hello everyone,

I have recently created a new GA account in our tenant. It is not assigned to any Azure Roles, Devices, Licenses or groups.

The odd thing is, is that this new GA account has assigned itself against everyone's OneDrive 'Site Collection Admin' and also as 'Site Admin' under all our SharePoint sites...

I have not ran any scripts since adding this GA account, and our IT team is only small (5 of us) and not all have GA access.

Is there a way this has happened automatically? Or something a staff member could have done without meaning too?

Any feedback/support on this would be great thank you.

I am within the IT Dept. so have access to troubleshoot etc.

SharePoint
SharePoint
A group of Microsoft Products and technologies used for sharing and managing content, knowledge, and applications.
10,246 questions
OneDrive Management
OneDrive Management
OneDrive: A Microsoft file hosting and synchronization service.Management: The act or process of organizing, handling, directing or controlling something.
1,193 questions
{count} votes

1 answer

Sort by: Most helpful
  1. RaytheonXie_MSFT 33,636 Reputation points Microsoft Vendor
    2024-07-08T02:42:43.7266667+00:00

    Hi @Josh Stokes,

    Per my research, this might be someone assigned the permission. By default, Global Administrators and SharePoint Administrators don't have automatic access to all sites and each user's OneDrive, but they can give themselves access to any site or OneDrive. They can also use Microsoft PowerShell to manage SharePoint and OneDrive. For more details, you could refer to following document

    https://learn.microsoft.com/en-us/sharepoint/sharepoint-admin-role#site-management


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.