On the tenant App Catalog site the group ReadOnlyAccessToTenantAdminSite has access. I'm not aware of having added this group myself. This looks like a recent change from Microsoft.

ReadOnlyAccessToTenantAdminSite AD group

Google so far does not show any results for ReadOnlyAccessToTenantAdminSite.

Clicking this group shows:

ReadOnlyAccessToTenantAdminSite AD group details

Customers need to know what this account does and whether it can or should be used to grant users (e.g. guest users) access to certain SharePoint areas like the app catalog.

  • I don't see this group on our tenant app catalog site. Nov 5, 2021 at 11:28
  • So far saw it in two tenants. Nov 8, 2021 at 11:17
  • 1
    Just checked on my tenant & I can see this group now (some kind of Domain Group). Tried searching for it in M365 admin center, Azure AD as well as MS Docs>> No results. Nov 8, 2021 at 12:08


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.