SharePoint & OneDrive · Site Management

Site Collection Administrator

Full control over a specific SharePoint site collection. Can manage all site settings, permissions, and content within their assigned site(s).

Scope: Single site collection or multiple assigned sites

Permissions

  • Site settings - Full access to all site configuration options
  • Permissions - Add/remove users and manage permission levels
  • Content - Full control over all lists, libraries, and pages
  • Site features - Activate and deactivate site features
  • Recycle bin - Access and restore deleted items (including second-stage)
  • Storage - View site storage usage
  • Subsites - Create, manage, and delete subsites

Common use cases

  • Department or team site administration
  • Project site management
  • Hub site administration
  • Intranet portal management

Best practices

  • Assign at least 2 site admins for continuity
  • Document site admin responsibilities
  • Use groups for permission management, not individuals
  • Regularly review and clean up permissions

Security considerations

  • Full access to all content in the site
  • Can grant access to external users if sharing enabled
  • Changes affect all site members
  • No access to SharePoint admin center

Common questions

When should I assign the Site Collection Administrator role?

Assign Site Collection Administrator when you need to: Department or team site administration; Project site management; Hub site administration; and Intranet portal management. It is part of SharePoint & OneDrive and should be granted as a least-privilege alternative to broader roles like Global Administrator.

What can someone with the Site Collection Administrator role do?

The Site Collection Administrator role grants permissions including: Site settings - Full access to all site configuration options; Permissions - Add/remove users and manage permission levels; Content - Full control over all lists, libraries, and pages; Site features - Activate and deactivate site features; Recycle bin - Access and restore deleted items (including second-stage); and Storage - View site storage usage. See the Permissions section above for the full list.

What are the security risks of the Site Collection Administrator role?

Key considerations when assigning Site Collection Administrator: Full access to all content in the site; Can grant access to external users if sharing enabled; Changes affect all site members; and No access to SharePoint admin center. Review the Security considerations section before assignment, and pair with Privileged Identity Management (PIM) for just-in-time access where possible.

Official Microsoft Learn documentation →

Open the interactive RBACMap →