Prerequisites for SharePoint Advanced Management

To use SharePoint Advanced Management capabilities, make sure your organization meets specific licensing, role, and setup requirements. SharePoint Advanced Management helps your organization strengthen how you observe content and permissions, govern access and lifecycle policies, and secure your environment against risks like oversharing, especially in environments using Microsoft 365 Copilot. These prerequisites ensure that your team has the appropriate access, tools, and permissions needed to manage governance features effectively and support these scenarios.

This article outlines the foundational requirements, including supported base subscriptions, add-on licensing, required administrative roles, and PowerShell setup.

Microsoft 365 base subscription

Your organization must have one of the following base licenses:

  • Office 365 E3, E5, or A5
  • Microsoft 365 E1, E3, E5, or A5

Microsoft 365 Copilot or SharePoint Advanced Management Plan 1 add-on

At least one of the following conditions is met:

  • At least one user in your organization is assigned a Microsoft 365 Copilot license. (The user doesn't need to be a SharePoint administrator.)
  • Your subscription includes SharePoint K, P1, or P2, and your organization has purchased the SharePoint Advanced Management Plan 1 add-on. (This add-on is sometimes referred to as SharePoint Advanced Management standalone.)

If your organization has at least one Microsoft 365 Copilot license assigned to a user, your SharePoint administrators automatically receive access to SharePoint Advanced Management capabilities to support your Copilot deployment.

Some features, such as restricted site creation, require SharePoint Advanced Management Plan 1. You can purchase this add-on through:

  • The Microsoft 365 admin center
  • A Cloud Solution Provider (CSP)
  • Volume licensing enrollment

External users don't require a license.

Role-based access control (RBAC) role assignments

To access the SharePoint admin center and use SharePoint Advanced Management capabilities, you must have an appropriate role assigned in Microsoft Entra ID. Assign these roles in either the Microsoft Entra admin center or the Microsoft 365 admin center.

  • SharePoint Administrator: Provides full administrative control over the SharePoint Online service, including sites, policies, groups, and operational tasks, such as service health and support.

  • SharePoint Advanced Management Administrator: Includes all SharePoint Administrator capabilities, plus advanced governance capabilities such as:

    • Viewing metadata (names, paths, URLs) across SharePoint content
    • Removing permissions from content at scale
    • Managing SharePoint Advanced Management features

SharePoint Online PowerShell module

The SharePoint Online Management Shell is a Windows PowerShell module that you can use to manage SharePoint settings at the organization and site level. To use SharePoint Online PowerShell commands, you need to install the SharePoint Online Management Shell module and connect it to the SharePoint Online service.

  1. Always download the latest SharePoint Online Management Shell before running any of the commands.

  2. In your PowerShell console, connect to SharePoint. To learn how, see Getting started with SharePoint Online Management Shell.

Note

If you installed a previous version of the SharePoint Online Management Shell, see SharePoint Online PowerShell command doesn't work correctly for instructions on removing older versions.

  • Last updated on