SharePoint site ownership sounds like admin housekeeping, but it decides whether anyone answers for a site at all. An owner approves access requests, removes people who no longer need to be there and decides when old content goes. When the owner leaves and nobody takes over, the site carries on working. It just stops being looked after.
This post covers who counts as an owner, how to find ownerless and single-owner sites, the Microsoft tools that help and a simple routine that keeps ownership current.
Why does every SharePoint site need an owner?
Access drifts. Someone shares a folder for one project, a guest is added for a review, a team grows and then shrinks. None of that matters much while a person who knows the site checks it now and then. Without an owner, nobody notices that a finance folder is still open to a former contractor, or that a site full of old drafts keeps turning up in search.
Copilot raises the stakes, because it answers from the content each person can already open, and a neglected site with wide access becomes far easier to find. Our post on the SharePoint oversharing check before Copilot covers that side. Ownership is what makes those fixes last, because the owner is the person who signs off when a site is right.
Who counts as a site owner?
That depends on the kind of site:
- Team sites connected to a Microsoft 365 group or a team in Teams. The group or team owners are the site owners, so fix ownership in the group or team rather than inside SharePoint.
- Private and shared channel sites. These are separate sites, and their owners are managed in Teams.
- Communication sites. These have no group behind them. The owners are whoever sits in the site's own Owners group.
What makes a good owner?
A good owner works in the team that uses the site, not only in IT. IT can run the tools, but it rarely knows whether the new starter in accounts should see last year's payroll files. Four rules go a long way:
- At least two owners per site. One owner is a single point of failure. Holidays, sick leave and resignations all leave a one-owner site with nobody in charge.
- Named people, not shared accounts. A generic mailbox cannot answer an access request or confirm a review.
- A purpose in one line. Owners decide faster when they know what the site is for and who it serves.
- A review date. Ownership that is never checked goes stale like everything else.
How do you find ownerless SharePoint sites?
Start with what you can see today. In the Microsoft 365 admin centre, the active teams and groups list has a filter for ownerless groups, and you can assign an owner straight from the results. That covers team sites and teams. For communication sites, check each site's Owners group, beginning with the sites that hold sensitive content.
To keep it that way, Microsoft offers two automated routes that cover different things.
The ownerless group policy
Set up in the Microsoft 365 admin centre, the ownerless group policy emails the most active members of a group or team that has lost its owners and asks whether they will take over. If the group has had no activity, it asks members at random. You choose how many members to ask and for how many weeks, the emails go out weekly, and up to two members can accept. If nobody does, the policy stops and an admin still has to find an owner. Microsoft lists Microsoft 365 Business Premium among the qualifying plans, alongside Microsoft 365 E3 and E5, so many smaller organisations already have it. It applies only to Microsoft 365 groups.
Site ownership policies in SharePoint Advanced Management
A SharePoint site ownership policy works at site level and goes further. You set a minimum number of owners, admins or both, choose which sites it covers and decide who is told when a site falls short. Recipients can include the current owners, the managers of owners who have left, and members who have read or edited something on the site in the last 180 days. Guests are never asked to take ownership.
A few details are worth knowing before you switch one on:
- Simulation comes first. Simulation mode runs once and gives you a report. Active mode runs monthly, sends the emails and can take enforcement action.
- Leavers leave a short window. A leaver's details are deleted 30 days after they go, so their manager may be told only once, and not at all if the policy runs after that point.
- Enforcement only applies to ownerless sites. Making a site read-only, or archiving it after a read-only period, applies only when a site has no owner at all. A site with one owner, where your rule asks for two, gets reminders but stays open.
- Some sites are left out. OneDrive, root sites, home sites and app catalogue sites are excluded.
Ownership policies sit alongside inactive site policies and site attestation policies, which ask owners to confirm that a site is still needed. All three belong to SharePoint Advanced Management. Microsoft's SharePoint Advanced Management prerequisites say these features arrive as soon as at least one user is assigned a Copilot licence, or through the Plan 1 add-on. The base plans Microsoft lists are enterprise plans such as Office 365 E3 and Microsoft 365 E3, so if you are on a Business plan, confirm you are eligible before relying on them.
Which tool covers what?
| Option | What it covers | What you need | When a site falls short |
|---|---|---|---|
| Manual review | Any site, one at a time | Admin access and time | Nothing happens until someone chases it |
| Ownerless group policy | Microsoft 365 groups and teams with no owner | A qualifying plan, such as Business Premium, E3 or E5 | Active members are asked weekly, then an admin must step in |
| Site ownership policy | Sites in your chosen scope that are below your minimum | SharePoint Advanced Management | Monthly reminders, and ownerless sites can be made read-only or archived |
| GovernPoint | Every SharePoint Online site, graded A to F | The app, from Microsoft Marketplace | Sites are ranked by risk, and you run owner campaigns from your own email or Teams |
A routine for SharePoint site ownership
- Build the list. Record every site, its owners and what it holds, and mark the sensitive ones.
- Fix the sensitive sites with no owner first. HR, payroll, finance, legal and anything with customer records come before the rest.
- Add a second owner everywhere. This one change removes the single point of failure.
- Add ownership to your leavers checklist. Hand a person's sites to someone else before their account is removed. That beats waiting for a policy to notice.
- Turn on the automation you already have. Run a site ownership policy in simulation mode, read the report, then decide whether to make it active.
- Ask owners to confirm. A periodic attestation, or a short email asking owners to check members and sharing, keeps the list honest.
Where GovernPoint fits
GovernPoint is our app on Microsoft Marketplace for finding and fixing SharePoint oversharing. It gives each SharePoint Online site a grade from A to F, ranks sites by risk and lets you run owner campaigns from your own email or Teams, so the people who know each site are asked to check it. Before a fix is applied you see who keeps access and who loses it, nothing changes until you approve, and fully reversible fixes come with a 30-day undo. Results stay in your tenant and file contents are never read. The 14-day full trial starts on install and needs no licence key.
If you would rather have a hand, our SharePoint governance and clean-up service covers owners for every site, a plan for inactive ones and permissions, all priced after a free call, with a written fixed quote before work starts.
Talk it through
To record owners, dates and sign-offs in one place, use the free 10-point SharePoint check before Copilot, which includes a sign-off form for each site owner. To look at your own sites with us, book a free 30-minute call.
