Is it possible to be a SCA for all sites in a tenant? Right now we are running into an issue of our SCA's having to be added to each individual site collection. We have the user accounts assigned to a role of SharePoint admin, do they need to be a global admin?

1 Answer 1


Unlike SharePoint on-prem, it is not possible to automatically apply at a higher level full control to all sites (i.e. a Web Application policy). With SharePoint Online, you will need to assign SCA on an individual site basis.

That can be automated, for example via a Site Design that calls a Flow which calls Azure Automate which runs the cmdlet Set-SPOUser -site $url -LoginName [email protected] -IsSiteCollectionAdmin $true. You can change the default site design to automatically do this.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.