Is it possible to grant full control or full read permissions to a user account of a SharePoint Online Tenant?

2 Answers 2


In the SharePoint admin center->site collection->owner, we can add users as site collection administrators who have full control to the relevant site collection.

In the SharePoint site->site settings->site permissions, we can grant the users with relevant permission levels such as full control, read.

Reference: Understanding permission levels in SharePoint

  • I know that this is possible. But I would like to know if it's possible to grant Full Control permissions to the complete SharePoint Online Tenant (e.g. on all Site Collections etc.) Just like on OnPremise environments where I can control the access permissions of a whole Web Application. Nov 1, 2017 at 14:30

You can provide permissions to following groups :

  1. All Authenticated Users: All user accounts which can be recognized by SharePoint Online, both for internal and external.

  2. All Users (Windows) : User accounts from Federated domains. enter image description here

  3. All Users (membership): All user accounts from Office 365 Online Services.

To add to this, there's also 'Everyone' and 'Everyone except external users'

Or In some cases Everyone also works

Everyone was what worked for me

EDIT Everyone is a default group that contains all authenticated and guest users that can connect to your network.

enter image description here

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.