Microsoft Lystavlen - the Online display board

Lystavlen is the danish word for 'the display board'. This blog is all about sharing the beauty of Microsoft Online Services

Understanding the Administrator Role in SharePoint Online

Understanding the Administrator Role in SharePoint Online

  • Comments 9
  • Likes

When you sign up for an Office 365 account, you automatically become an Office 365 global administrator and a SharePoint Online Administrator. This global administrator is added to the team site that is automatically created for you during your Office 365 account setup (for example,, and is assigned the site collection administrator role.

One very important point to make here – and this is one of the most common questions on the communities – is that you cannot separate the roles of Office 365 global administrator and SharePoint Online Administrator.

In other words – you being the the Office 365 global administrator (aka the Tenant Admin) cannot redelegate the role of SharePoint Online Administrator  (aka SPO Admin) to another person. What you being the SPO Admin in an E plan *can* do delegation wise, is to delegate the admin rights for a site collection to another person besides yourself. This person in turn can delegate admin rights to sites in the site collection to other persons. But the Tenant Admin cannot delegate the SPO Admin role to someone else.

A site collection is the root of permissions for all the sites (known as subsites) underneath it.

Site collection administrators have permissions to manage SharePoint Online at the site collection level (or top level) of a SharePoint Online site, meaning that their permissions extend to all the content in the site collection that they administer. Also, those permissions are inherited down through all the subsites underneath the site collection, by default. This means changes that site collection administrators make at are inherited in subsites like

It’s important to note that a new site collection is its own permissions root. For example, a new top-level site collection created at does not have the same permissions as

For more info see the wiki post Permissions in Office 365 FAQ

See also

  • I don't understand what is "AKA  the Tenant Admin" mean. What is "AKA"? Is global administrator a tenant admin or not?

  • Wayne, AKA means Also Known As.

  • thanks

  • This is a bg concern in a large size enterprise. The tenant admin rights caa ot be given to a SharePoint admin.
    What is the solution. Is this a bug or short sightedness of MS design team

  • I completely agree with Pankaj. The role of SharePoint Administrator should not mean you are also a Global Admin. That is ludicrous in a large organisation. Am I missing something?

  • This is so strange. They keep saying go for Office 365, but SharePoint Online is extremely limiting in so many important ways!

  • This is not true for the MySites site collection

  • This is stupid. There is no technical reason for this limitation.

  • There's a workaround, you can use the powershell cmdlet below:

    Set-SPOUser -Site -LoginName -IsSiteCollectionAdmin $true

Your comment has been posted.   Close
Thank you, your comment requires moderation so it may take a while to appear.   Close
Leave a Comment