Newly created site denies access to members

Question

I'm using the REST API to create a site in SharePoint Online and add an AAD security group to the site member group. When one of the AAD group members tries to access the site it displays the access request page. If the user logs out of O365 and logs back in they are able to access the site.

My basic steps are:

1. Create site _api/SPSiteManager/create
2. Create AAD security group and add members
3. Wait for AAD group to be synced to SharePoint
4. Add AAD group to site member group _api/web/sitegroups(<id>)/users

Is there a step that would fix this issue? I'm somewhat restricted in what I can use (no javascript, no powershell)

Answer 1

I believe this is the expected behavior for AAD groups and SharePoint, due to a user's claims/token caching. As I understand it, it can take 8 hours before the user can access the site, unless of course they logout/login which refreshes their claims.

Answer 2

You can try to add Azure AD security Group into the SPO Site group using powershell

Add-PnPGroupMember -LoginName <Azure AD Group Name> -Group "<Group Name>"

You can refer to this article for more details

https://techpress.net/add-azure-ad-group-to-sharepoint-site-and-configure-site-permissions/#:~:text=Configure%20Sharepoint%20Site%20Permissions,-Login%20on%20the&text=Click%20on%20the%20Settings%20Cog,the%20AD%20Security%20Group%20created.