Restrict Global Admin to HR SharePoint Site

Question

I understand that Global admin could set-up a link to access a user's OneDrive, and add him/herself as the Site Admin to view all files in SharePoint. But my company hopes to protect the Global Admin as well in case if there's any confidential info that leaks out.

Is there a workaround or method to restrict Global Admin to access to a HR/Finance SharePoint Site? Or the only way to do this is for the files to be saved in HR Manager's OneDrive, and then share it with the HR Executive?

Answer 1

@Josephine Ruth Sim

We cannot restrict Global Admins from gaining access to a Site Collection.

“Global admins and SharePoint admins don't have automatic access to all sites and each user's OneDrive, but they can give themselves access to any site or OneDrive. They can also use Microsoft PowerShell to manage SharePoint and OneDrive.”

You could refer to this article About the SharePoint admin role in Microsoft 365.

Similar issue for your reference:
Can i prevent global admins or other sharepoint admins from accessing our site collections

Thanks,
Echo Du

==========

If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Not really, every restriction you put in place can be bypassed by GA.