I want to restrict access to a site in Sharepoint Online.

I have disabled inheritance and created a new Contributor Sharepoint group, called [Site] Members.

When I add Active Directory (AD) group A to this Sharepoint group, and use "Check permissions" it shows the expected result. But when I add AD group B, "Check permissions" shows that its members don't have access.

Both AD groups A and B are non-nested, meaning they only contain users, not other AD groups. They are also both Security groups and similar in every way.

If I add users from group B to the Sharepoint group directly, then "Check permissions" reports that they have access.

Why doesn't group B work?


Please have a check on user information list. If group B is listed there, please remove it and re-grant access to Group B.

If Group B is not in that list, try to add Group B with powershell Add-SPOUser and see if the issue remains.

You can submit a service request for further help from MS support team.

Update: Information about User information list.

If nothing helps, you can simply ask for a service request and the MS support team will provide further help.

  • where do I find the "user information list"? – Rugbrød Oct 1 '19 at 12:48
  • @Rugbrød Please check the link i update. – Jerry_MSFT Oct 2 '19 at 8:36
  • I see group B in the list – Rugbrød Oct 2 '19 at 13:25
  • @Rugbrød Sorry for the late reply, have your tried to remove group B from the user information list and re-add it? – Jerry_MSFT Oct 7 '19 at 7:07
  • If it's safe to do, then I will try it. – Rugbrød Oct 7 '19 at 7:26

Apparently, the users in Group B had both normal and Administrator user account types, and group B only contained the latter.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.