Set the SharePoint Administrator as "site collection admins" when creating new Modern Team sites and Communication sites. Today t's the grou
Set the SharePoint Administrator as "site collection admins" when creating new Modern Team sites and Communication sites.
Today t's the group associated with the team site and even Global Admin cannot access or do anything.
This is really strange having all members of the group as "site collection admins" and unlogical to not provide SharePoint Admin access to SharePoint sites as it was before. Really hard to manage for us.
Jer Harwood commented
At the very least don't put the whole group alias as the SCA. The old way of whoever created the site is still better than that!
In my opinion it is sufficient for group owners to have full control and SharePoint administrators should get site collection administrators. I guess on prem nobody has ever promoted a user to a site collection administrators, that was always a admin security group or a service / technical account
I mean also on old classic sites spo admins had/have no site admin access per default , you have to set using ps for example, and it is ok
Veronique Palmer commented
The entire permissions model has been broken by Microsoft in the modern templates. This is one of the major fails.