I have a SharePoint site where, when searching for a user at site level (using check permissions) it comes back saying the user has "Full control, limited access - Given through the 'Site Name' Owners Group.

However, the user is not an Owner of the site and when I click into the Owners group, they are not listed in there either.

How is this user being provided with access at site level from the specified group when they don't appear to be in that group and how would I go about visualising and removing these user permissions?

I should add that when I click the "There are limited access users on this site. Users may have limited access if an item or document under the site has been shared with them. Show users". It doesn't show any additional users, but instead replaces 'Full Control' with 'Full Control, Limited Access' against the Site Owners group.

  • Is it sub site? Permission inheritance broken on this site? Commented Apr 16, 2021 at 3:01
  • It's not a sub site.
    – user96904
    Commented Apr 16, 2021 at 8:08

2 Answers 2


Check below things:

  1. If user is a part of Site collection administrators
  2. If user has been granted permissions via Microsoft 365 group
  • Thanks. I can confirm that user is not part of Site collection administrators and also the user has not been granted permissions via any 365 group.
    – user96904
    Commented Apr 16, 2021 at 8:04

I met the same problem before. You could use PowerShell to remove the user.

$UserID="[email protected]"
#Get Credentials to connect
$Cred = Get-Credential
#Connect to SharePoint Online Admin Site
Connect-SPOService -Url $AdminSiteURL -Credential $cred
#sharepoint online powershell remove user permissions from site collection
Remove-SPOUser -Site $SiteURL -LoginName $UserID

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.