I want to restrict access to a site in Sharepoint Online.

I have disabled inheritance and created a new Contributor Sharepoint group, called [Site] Members.

When I add Active Directory (AD) group A to this Sharepoint group, and use "Check permissions" it shows the expected result. But when I add AD group B, "Check permissions" shows that its members don't have access.

Both AD groups A and B are non-nested, meaning they only contain users, not other AD groups. They are also both Security groups and similar in every way.

If I add users from group B to the Sharepoint group directly, then "Check permissions" reports that they have access.

Why doesn't group B work?

2 Answers 2


Please have a check on user information list. If group B is listed there, please remove it and re-grant access to Group B.

If Group B is not in that list, try to add Group B with powershell Add-SPOUser and see if the issue remains.

You can submit a service request for further help from MS support team.

Update: Information about User information list.

If nothing helps, you can simply ask for a service request and the MS support team will provide further help.

  • where do I find the "user information list"?
    – Rugbrød
    Oct 1, 2019 at 12:48
  • @Rugbrød Please check the link i update.
    – Jerry_MSFT
    Oct 2, 2019 at 8:36
  • I see group B in the list
    – Rugbrød
    Oct 2, 2019 at 13:25
  • @Rugbrød Sorry for the late reply, have your tried to remove group B from the user information list and re-add it?
    – Jerry_MSFT
    Oct 7, 2019 at 7:07
  • If it's safe to do, then I will try it.
    – Rugbrød
    Oct 7, 2019 at 7:26

Apparently, the users in Group B had both normal and Administrator user account types, and group B only contained the latter.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.