SharePoint & OneDrive · Site Management

Hub Site Administrator

Manages hub site registration and association. Can associate sites with hubs and configure hub-wide navigation and branding.

Scope: Hub site and its associated sites

Permissions

  • Hub registration - Register sites as hub sites
  • Site association - Associate/disassociate sites with hubs
  • Hub navigation - Configure shared navigation
  • Hub branding - Apply consistent branding to associated sites
  • Hub permissions - Control who can associate sites

Common use cases

  • Creating departmental or regional hub sites
  • Building intranet navigation structure
  • Applying consistent branding across related sites
  • Connecting team sites to organizational hubs

Best practices

  • Plan hub structure before implementation
  • Limit hub sites to major organizational units
  • Use consistent navigation patterns
  • Document association policies

Security considerations

  • Hub settings affect all associated sites
  • Navigation changes are visible to all hub users
  • Consider change management for hub modifications

Common questions

When should I assign the Hub Site Administrator role?

Assign Hub Site Administrator when you need to: Creating departmental or regional hub sites; Building intranet navigation structure; Applying consistent branding across related sites; and Connecting team sites to organizational hubs. It is part of SharePoint & OneDrive and should be granted as a least-privilege alternative to broader roles like Global Administrator.

What can someone with the Hub Site Administrator role do?

The Hub Site Administrator role grants permissions including: Hub registration - Register sites as hub sites; Site association - Associate/disassociate sites with hubs; Hub navigation - Configure shared navigation; Hub branding - Apply consistent branding to associated sites; and Hub permissions - Control who can associate sites. See the Permissions section above for the full list.

What are the security risks of the Hub Site Administrator role?

Key considerations when assigning Hub Site Administrator: Hub settings affect all associated sites; Navigation changes are visible to all hub users; and Consider change management for hub modifications. Review the Security considerations section before assignment, and pair with Privileged Identity Management (PIM) for just-in-time access where possible.

Official Microsoft Learn documentation →

Open the interactive RBACMap →