Restrict Global Admin to HR SharePoint Site

Josephine Ruth Sim 21 Reputation points

I understand that Global admin could set-up a link to access a user's OneDrive, and add him/herself as the Site Admin to view all files in SharePoint. But my company hopes to protect the Global Admin as well in case if there's any confidential info that leaks out.

Is there a workaround or method to restrict Global Admin to access to a HR/Finance SharePoint Site? Or the only way to do this is for the files to be saved in HR Manager's OneDrive, and then share it with the HR Executive?

A group of Microsoft Products and technologies used for sharing and managing content, knowledge, and applications.
9,131 questions
SharePoint Server Management
SharePoint Server Management
SharePoint Server: A family of Microsoft on-premises document management and storage systems.Management: The act or process of organizing, handling, directing or controlling something.
2,759 questions
0 comments No comments
{count} votes

Accepted answer
  1. Echo Du_MSFT 17,086 Reputation points

    @Josephine Ruth Sim

    We cannot restrict Global Admins from gaining access to a Site Collection.

    “Global admins and SharePoint admins don't have automatic access to all sites and each user's OneDrive, but they can give themselves access to any site or OneDrive. They can also use Microsoft PowerShell to manage SharePoint and OneDrive.”

    You could refer to this article About the SharePoint admin role in Microsoft 365.

    Similar issue for your reference:
    Can i prevent global admins or other sharepoint admins from accessing our site collections

    Echo Du


    If an Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Vasil Michev 90,396 Reputation points MVP

    Not really, every restriction you put in place can be bypassed by GA.

    0 comments No comments