SharePoint & OneDrive · Content & Permissions
Site Owner
Full control permission level on a SharePoint site. Can manage site settings, create lists and libraries, and control permissions for site members.
Scope: Single SharePoint site
Permissions
- Site settings - Access most site configuration options
- Lists and libraries - Create, modify, and delete
- Pages - Create and edit site pages
- Permissions - Manage site member and visitor permissions
- Apps - Add and remove apps from the site
- Subsites - Create subsites (if enabled)
Common use cases
- Team site ownership
- Project site management
- Department collaboration spaces
- Community site administration
Best practices
- Assign to team leads or project managers
- Use Members group for regular contributors
- Review permissions quarterly
- Avoid breaking inheritance unless necessary
Security considerations
- Can share content externally if enabled at site level
- Can break permission inheritance on any item
- Full access to all content in the site
- Cannot manage other site collection settings
Common questions
When should I assign the Site Owner role?
Assign Site Owner when you need to: Team site ownership; Project site management; Department collaboration spaces; and Community site administration. It is part of SharePoint & OneDrive and should be granted as a least-privilege alternative to broader roles like Global Administrator.
What can someone with the Site Owner role do?
The Site Owner role grants permissions including: Site settings - Access most site configuration options; Lists and libraries - Create, modify, and delete; Pages - Create and edit site pages; Permissions - Manage site member and visitor permissions; Apps - Add and remove apps from the site; and Subsites - Create subsites (if enabled). See the Permissions section above for the full list.
What are the security risks of the Site Owner role?
Key considerations when assigning Site Owner: Can share content externally if enabled at site level; Can break permission inheritance on any item; Full access to all content in the site; and Cannot manage other site collection settings. Review the Security considerations section before assignment, and pair with Privileged Identity Management (PIM) for just-in-time access where possible.