I'm creating a SPO site that will serve as the backend for a PowerApp. Several lists will have item level permissions so that only users who created the data will be able to view it. The app will have administrators who will need full access to all data on the site (including data they themselves didn't create), and granting that access is simple and straightforward with Full Control. But I cannot figure out how to prevent the admins from modifying the underlying lists. I'm trying to prevent a potential accidental list modification or deletion by a well-meaning but inexperienced admin...

Is this possible, or are these levels of permissions linked and inseparable?

1 Answer 1


Anyone you give Owner (which by default provides Site Collection Admin) rights to will have the ability to fully control the site, up to and including deletion of the site.

There is no mechanism to prevent an administrator from making schema modifications, etc.

  • Is there any lesser mechanism than Owner that would provide access to all site data?
    – ARich
    Jul 23, 2020 at 19:10
  • Nothing that would override ACLs, no.
    – Trevor Seward
    Jul 23, 2020 at 19:31

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.