Sharepoint Powershell Error Get-SPOUser : Access is denied. (Exception from HRESULT: 0x80070005

Question

Sharepoint Powershell Error Get-SPOUser : Access is denied. (Exception from HRESULT: 0x80070005

Kanta Prasad 41

I have a list of Sharepoint site URLS in below mentioned CSV file. I am already Sharepoint Administrator and Global Administrator as well in our Office 365 tenant.

Could you please help me how can I avoid below error and get the list of permissions and other sharepoint site attributes as :(DisplayName,LoginName,IsSiteAdmin,IsGroup,UserType)

Import-csv c:\temp\Sites_URL_Lists.csv

Get-SPOSite -Limit 1 | ForEach {Get-SPOUser –Site $_.Url} | ft -a

Get-SPOUser : Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))

MARIA LUISA DEL RIO ORIHUELA 0 Reputation points

2024-09-11T21:14:48.0233333+00:00

We need to separate this administration. From the governance of Sharepoint sites as global administration (users, groups, privileges..), report storage and count files , access and audit events from the administration of the site and contents involve there, that maybe are confidential or sensible.

With the Exchange administration role we can launch these kind of questions without assign full access or owner access to the mailbox itself.

Answer accepted by question author

1 additional answer

Your answer

MARIA LUISA DEL RIO ORIHUELA 0 Reputation points

2024-09-11T21:14:48.0233333+00:00

We need to separate this administration. From the governance of Sharepoint sites as global administration (users, groups, privileges..), report storage and count files , access and audit events from the administration of the site and contents involve there, that maybe are confidential or sensible.

With the Exchange administration role we can launch these kind of questions without assign full access or owner access to the mailbox itself.

Answer 1

Emily Du-MSFT 51,941 Microsoft External Staff

@Kanta Prasad

Microsoft 365 Administrator Role (SharePoint Administrator, Global Administrator) will not automatically be given rights to site collections, site contents and so on. You must have appropriate rights at the site collection level.

If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Emily Du-MSFT 51,941 Reputation points Microsoft External Staff

2021-10-18T06:11:14.97+00:00

@Kanta Prasad

I’m checking how the things are going on about this issue. Whether the answer helps you?

If there is any problem with this issue, feel free to let me know.
Emily Du-MSFT 51,941 Reputation points Microsoft External Staff

2021-11-02T09:16:29.47+00:00

@Kanta Prasad

I am looking forward to your feedback if there is any update.

Please remember to update this thread if you have any progress.

Thank you for your understanding.
Alex Ribot 46 Reputation points

2022-11-25T12:30:16.997+00:00

Hi Emily,

we have the same issue here.
Running Get-SPOUser -Site <site_name> or Get-SPOSiteGroup -Site <site_name> will return ACCESS_DENIED error even if you are global admin (and not admin of that SP site).
The inconsistency comes when using the SP web admin center, you can go to that particular site and get the members list from Permissions tabs and expanding "Site members" or "Site owners"

We, as global admins, just need to get the list of user members for each site. We do not need access to data nor being admin members for each site.
Is there any other way using PS? Maybe using Graph API will be more promising?

Thank you
A, Yosi 1 Reputation point

2023-09-28T20:54:08.8366667+00:00

Alex, did you manage to get this done via Powershell?

ty

Answer 2

Sebastian Cerazy 321

That is absolutely diabolical design!

I need to remove a user from EVERY site collection admins, for which I would need to add ANOTHER user first.

What a joke!

Share via

Sharepoint Powershell Error Get-SPOUser : Access is denied. (Exception from HRESULT: 0x80070005

1 additional answer

Your answer