Is there a way to add a security group as Primary or secondary site collection administrator to all the sites in the tenant via PowerShell?

I know this works for adding a user account to all the sites as SC Admin

$Sites = Get-SPOSite -Limit ALL
Foreach ($Site in $Sites)
Set-SPOUser -site $Site.Url -LoginName $AdminName -IsSiteCollectionAdmin $True

The same command with Set-SPOSiteGroup does not work

Set-SPOSiteGroup : A parameter cannot be found that matches parameter name 'IsSiteCollectionAdmin'

Since 'IsSiteCollectionAdmin' is not accepted with Set-SPOSiteGroup

Any suggestions on how to set security group as site collection administrator via PS script/ cmdlets?

2 Answers 2


Just tried it here and worked for me. I'm using PNP and assuming you got the Security group ID from Azure AD. Microsoft documentation also states:

"You must be a Site Collection Admin to run...[the Add-PnPSiteCollectionAdmin] ...command. Use Set-PnPTenantSite -Owners if you are not an Admin for the site but have the SharePoint admin role."

Connect-PNPOnline "https://tenant.sharepoint.com/sites/SiteCollection"
$web = Get-PnPWeb
$admins = Get-PnPSiteCollectionAdmin
write-host "Original Site Colletion Admins: " $admins
$azureADGroup = "c:0t.c|tenant|AzureAD-SecurityGroup-ID"
$ensureUser = $web.EnsureUser($azureADGroup)
$user = Get-PnPUser -Identity $azureADGroup
Add-PnPSiteCollectionAdmin -Owners $user.LoginName

You can not add AD security group as Site Collection administrator.

Refer This link.

  • 1
    This seems to be really outdated and definitely not for SharePoint Online. Aug 21, 2019 at 21:22

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.