SharePoint & OneDrive · Site Management

Hub Site Administration

Responsibility profile, not a standalone Microsoft role. SharePoint Administrators register hubs; authorized site owners or site admins can associate sites and manage hub content within their existing permissions.

Scope: Hub site and its associated sites

Permissions

  • Hub registration - Register sites as hub sites
  • Site association - Associate/disassociate sites with hubs
  • Hub navigation - Configure shared navigation
  • Hub branding - Apply consistent branding to associated sites
  • Hub permissions - Control who can associate sites

Common use cases

  • Creating departmental or regional hub sites
  • Building intranet navigation structure
  • Applying consistent branding across related sites
  • Connecting team sites to organizational hubs

Best practices

  • Plan hub structure before implementation
  • Limit hub sites to major organizational units
  • Use consistent navigation patterns
  • Document association policies

Security considerations

  • Hub settings affect all associated sites
  • Navigation changes are visible to all hub users
  • Consider change management for hub modifications

Common questions

When should I assign the Hub Site Administration role?

Assign Hub Site Administration when you need to: Creating departmental or regional hub sites; Building intranet navigation structure; Applying consistent branding across related sites; and Connecting team sites to organizational hubs. It is part of SharePoint & OneDrive and should be granted as a least-privilege alternative to broader roles like Global Administrator.

What can someone with the Hub Site Administration role do?

The Hub Site Administration role grants permissions including: Hub registration - Register sites as hub sites; Site association - Associate/disassociate sites with hubs; Hub navigation - Configure shared navigation; Hub branding - Apply consistent branding to associated sites; and Hub permissions - Control who can associate sites. See the Permissions section above for the full list.

What are the security risks of the Hub Site Administration role?

Key considerations when assigning Hub Site Administration: Hub settings affect all associated sites; Navigation changes are visible to all hub users; and Consider change management for hub modifications. Review the Security considerations section before assignment, and pair with Privileged Identity Management (PIM) for just-in-time access where possible.

Official Microsoft Learn documentation →

Open the interactive RBACMap →