SharePoint & OneDrive RBAC Roles

Full access to the SharePoint admin center. Can create and manage sites, designate site admins, manage sharing settings, and manage Microsoft 365 groups.

Read-only access to SharePoint admin center settings and configurations. Cannot make changes but can view all settings.

Manages content migration to Microsoft 365 including SharePoint sites, OneDrive, and Teams from sources like Google Drive, Dropbox, and Box.

Full control over a specific SharePoint site collection. Can manage all site settings, permissions, and content within their assigned site(s).

Manages the organizational term store - a directory of common terms used across the organization for metadata and content classification.

Responsibility profile, not a standalone Microsoft role. SharePoint Administrators register hubs; authorized site owners or site admins can associate sites and manage hub content within their…

Full control permission level on a SharePoint site. Can manage site settings, create lists and libraries, and control permissions for site members.

Edit permission level on a SharePoint site. Can add, edit, and delete content in lists and libraries but cannot manage site settings.

Read permission level on a SharePoint site. Can view content but cannot add, edit, or delete items.

Owners of a Microsoft 365 group automatically become site collection administrators of the connected SharePoint team site.

Responsibility profile, not a standalone Microsoft role. Organization and site sharing settings are managed by SharePoint Administrators.

Responsibility profile, not a standalone Microsoft role. SharePoint Administrators manage these tenant controls, often together with Conditional Access Administrators.

Responsibility profile, not a standalone Microsoft 365 admin role. OneDrive tenant settings and user OneDrive administration are handled through the SharePoint Administrator role.

Responsibility profile, not a standalone Microsoft role. Sync policies are configured with Group Policy or Intune by administrators who hold the required device-management permissions.

Manages SharePoint Advanced Management (SAM) features including data access governance, content lifecycle management, and advanced access controls.

Responsibility profile, not a standalone Microsoft role. SharePoint Administrators or SharePoint Advanced Management Administrators configure these policies with SharePoint Online PowerShell.