logo
search
Permission & Access Issues

How to Fix Microsoft Lists Permissions Removed Without Changes

Phi Hung VoPhi Hung Vo Sep 28, 2026 869 views

Question details

Users need to investigate and resolve issues where Microsoft Lists permissions are unexpectedly modified or removed without direct manual intervention.

How to Fix Microsoft Lists Permissions Removed Without Changes
Product
Microsoft Lists
Device & OS
not provided
Scenario
A user or team discovers that co-owner or read-only access to specific Microsoft Lists has been removed unexpectedly.
Observed behavior
Access permissions for Microsoft Lists are automatically revoked or altered, preventing authorized users from viewing or editing the list, despite no admin or owner manually making these changes.
Before you start

Ensure you have Global Administrator, Compliance Administrator, or SharePoint Administrator privileges in Microsoft 365, as you will need these rights to access the Purview audit logs and review organization-wide policies.

Solution 1Recommended

Review Microsoft Purview Audit Logs

Use the Microsoft Purview compliance portal to track down exactly who or what modified the list permissions.

The Microsoft Purview audit log records all user and system activities within your tenant. By filtering for SharePoint and Lists activities, you can identify the exact timestamp and source of the permission change.

1
Access the Compliance Portal

Log in to the Microsoft 365 admin center and navigate to the Microsoft Purview compliance portal.

2
Open Audit Search

In the left-hand navigation menu, click on 'Audit' to open the audit log search interface.

3
Set Search Parameters

Set the Date and time range to cover when the permissions were lost. Under 'Activities', search for and select SharePoint list activities, specifically looking for 'Modified list permissions' or 'Removed user or group from SharePoint group'.

4
Filter by Site or List URL

In the 'File, folder, or site' field, paste the exact URL of the affected Microsoft List to narrow down the results, then click 'Search'.

5
Export and Analyze Results

Once the search completes, click 'Export' to download the results as a CSV file. Review the 'User' and 'Item' columns to determine if an automated system account or an administrator triggered the change.

Review Microsoft Purview Audit Logs
Audit Log Retention: Audit logs must have been turned on prior to the incident. Standard audit logs are retained for 90 days, while premium licenses may retain them for up to a year.
Free Microsoft Office alternative

Try WPS Office for Seamless Data and Document Management

If you are struggling with complex administrative permission issues in Microsoft 365, WPS Office offers a free, lightweight, and highly compatible alternative. You can manage your tracking data seamlessly using WPS Spreadsheet with simple file-sharing capabilities and native compatibility with Microsoft Office formats.

  1. 1. Download WPS Office: Visit the official WPS Office website and download the free installation package for your operating system.
  2. 2. Install and Launch: Run the installer and follow the on-screen prompts. Once installed, open WPS Office.
  3. 3. Manage Data with Spreadsheets: Use WPS Spreadsheet to import your existing list data or create new tracking sheets without worrying about unexpected backend permission changes.
Free, lightweight, and easy to use without complex administrative overheadHigh compatibility with Microsoft Excel (.xlsx), Word (.docx), and PowerPoint (.pptx)Simple file sharing and local permission managementFamiliar user interface for a seamless transition from Microsoft Office
microsoft office alternative - wps office

Frequently Asked Questions

Can external sharing settings cause list permissions to drop unexpectedly?

Yes. If an administrator changes the organization's or site's external sharing settings to be more restrictive (e.g., changing from 'Anyone' to 'Only people in your organization'), existing external guests will immediately lose their access to the list.

How long does Microsoft Purview retain audit logs for permission changes?

By default, standard audit logs in Microsoft 365 are retained for 90 days. If your organization has premium licensing (like E5) and has configured extended retention, logs can be kept for up to one year or longer.

Can a Power Automate flow change Microsoft Lists permissions in the background?

Yes. Power Automate flows have specific actions, such as 'Stop sharing an item or a file' or 'Grant access to an item or a folder', which can alter list permissions without manual user interaction. This is a common cause for unexpected permission changes.

Why does a user still get an 'Access Denied' error when they are in a SharePoint group?

This can happen if the site collection's permission inheritance is broken at the list level, or if the user's specific account has an active Conditional Access policy blocking their login session due to network or device non-compliance.