logo
search
Permission & Access Issues

How to Restrict SharePoint Online Site Access to a Microsoft 365 Group

Natalie TaylorNatalie Taylor Oct 8, 2026 869 views

Question details

The user needs to restrict access to a SharePoint Online site so that only members of a specific Microsoft 365 group or Team can access it.

How to Restrict SharePoint Online Site Access to a Microsoft 365 Group
Product
SharePoint Online
Device & OS
not provided
Scenario
Managing site access for a SharePoint site connected to a Microsoft 365 group to ensure non-members cannot view or edit content.
Observed behavior
By default, sites connected to public groups allow broader access, requiring a privacy setting adjustment so that only authorized members receive default access.
Before you start

Ensure you have Microsoft 365 global administrator or SharePoint administrator privileges to modify group privacy settings in the admin center.

Solution 1Recommended

Set the Microsoft 365 Group Privacy to Private

Changing the associated Microsoft 365 group to a private group ensures that only approved members have access to the connected SharePoint site.

When a Team or Microsoft 365 group is created, it automatically provisions an associated SharePoint site. If the group is public, anyone in the organization can access the site. Changing the privacy setting to private is the most effective way to restrict access to members only.

1
Log into the Microsoft 365 Admin Center

Navigate to the Microsoft 365 admin portal using your administrator credentials.

2
Navigate to Active Teams & Groups

In the left-hand navigation menu, expand the 'Teams & groups' section and select 'Active teams and groups'.

3
Select the target group

Click on the 'Teams & Microsoft 365 groups' tab. Search for and click on the specific group associated with your SharePoint site to open its properties panel.

4
Modify Privacy Settings

Navigate to the 'Settings' tab within the group panel. Locate the 'Privacy' section and change the setting from 'Public' to 'Private', then save your changes.

Set the Microsoft 365 Group Privacy to Private
Access Restricted Successfully: Once set to private, users outside of the Microsoft 365 group will immediately lose access to the SharePoint site unless they are explicitly granted permission.
Free Microsoft Office alternative

Looking for a Lightweight Office Suite?

While managing SharePoint and Microsoft 365 permissions requires administrator access, you can rely on WPS Office as a highly compatible, free alternative for creating and editing your Word, Excel, and PowerPoint documents locally or via the cloud.

  1. 1. Download the Installer: Visit the official WPS Office website and download the free installer for your operating system.
  2. 2. Install WPS Office: Run the setup file and follow the straightforward on-screen instructions to install the suite.
  3. 3. Open Your Office Documents: Launch WPS Office and seamlessly open any existing Word, Excel, or PowerPoint files without formatting loss.
Fully compatible with Microsoft Office formats (.docx, .xlsx, .pptx)Familiar and intuitive user interface for seamless migrationLightweight application that launches quickly on Windows, Mac, and LinuxFeature-rich free alternative for individual and business use
microsoft office alternative - wps office

Frequently Asked Questions

Why can everyone in my organization see my SharePoint site?

Your SharePoint site is likely connected to a Microsoft 365 group or Team that is set to 'Public'. In a public group, anyone in the organization can view the content. Changing the group to 'Private' in the admin center will restrict access.

Does changing a Team to private automatically affect the connected SharePoint site?

Yes, Microsoft Teams and Microsoft 365 groups share the same permission architecture. When you change a Team's privacy to private, the connected SharePoint site automatically inherits this restriction.

Should I break permission inheritance on my SharePoint document library to restrict access?

It is generally advised to avoid breaking permission inheritance unless absolutely necessary. Breaking inheritance makes long-term management complex. Instead, manage access at the Microsoft 365 group level by adding or removing members.