SharePoint & OneDrive · OneDrive Management
OneDrive Administration
Responsibility profile, not a standalone Microsoft 365 admin role. OneDrive tenant settings and user OneDrive administration are handled through the SharePoint Administrator role.
Scope: Organization-wide OneDrive settings and individual user OneDrive
Permissions
- Storage limits - Set default and per-user storage quotas
- Sync settings - Configure sync client policies and restrictions
- Retention - Set OneDrive retention for deleted users
- Notifications - Configure sharing notification settings
- User OneDrive - Access and manage individual user OneDrive
Common use cases
- Managing OneDrive storage allocation
- Configuring sync client group policies
- Handling departed user OneDrive content
- Troubleshooting individual user issues
Best practices
- Set appropriate default storage limits
- Use Known Folder Move for data protection
- Configure appropriate retention periods
- Document access to user OneDrive
Security considerations
- Can access any user OneDrive by granting self-access
- User OneDrive contains personal and work files
- Follow privacy guidelines for access
- Departed user OneDrive may contain sensitive data
Common questions
When should I assign the OneDrive Administration role?
Assign OneDrive Administration when you need to: Managing OneDrive storage allocation; Configuring sync client group policies; Handling departed user OneDrive content; and Troubleshooting individual user issues. It is part of SharePoint & OneDrive and should be granted as a least-privilege alternative to broader roles like Global Administrator.
What can someone with the OneDrive Administration role do?
The OneDrive Administration role grants permissions including: Storage limits - Set default and per-user storage quotas; Sync settings - Configure sync client policies and restrictions; Retention - Set OneDrive retention for deleted users; Notifications - Configure sharing notification settings; and User OneDrive - Access and manage individual user OneDrive. See the Permissions section above for the full list.
What are the security risks of the OneDrive Administration role?
Key considerations when assigning OneDrive Administration: Can access any user OneDrive by granting self-access; User OneDrive contains personal and work files; Follow privacy guidelines for access; and Departed user OneDrive may contain sensitive data. Review the Security considerations section before assignment, and pair with Privileged Identity Management (PIM) for just-in-time access where possible.