SharePoint oversharing reports now sit behind a special admin role
Reviewed by Helen Jones
A 31 August 2026 practitioner roadmap, checked against Microsoft Learn, treats the 2026 SharePoint Advanced Management wave as shipped rather than promised. The SharePoint Admin Agent is live in the Copilot app, the SharePoint admin center, and Teams, and it needs the SharePoint Advanced Management Administrator role. Catalog management is also live, grouping sites from Entra and SharePoint metadata with hourly refresh. A downloadable report of sites and files shared with Everyone except external users or Everyone can export up to 1 million rows. Even a Global Administrator cannot see those file properties without the SAM Administrator role. Microsoft 365 E5 on its own still only covers data access governance reporting. Full SAM needs Copilot, SAM Plan 1, or E7. The first site permissions snapshot can take up to five days.
For years, Copilot readiness meant staring at site-level sharing and hoping the worst Everyone links were not buried in libraries. Global Admin was enough to open most SharePoint reports, and E5 looked like the governance ceiling for a small team. That split is now explicit. Item-level oversharing and the Admin Agent sit behind a licence SKU and a role that Global Admin does not imply. Restricted Content Discovery is also documented as a per-site way to hide Copilot and agent-creation entry points as Restricted SharePoint Search is retired, so sprawl cleanup and Copilot exposure are no longer the same admin surface.
Analysis
This is a gate to check, not a cleanup to start. Confirm whether the tenant has SAM Plan 1, Copilot, or E7 and whether anyone holds the SAM Administrator role before you promise leadership file-level Everyone reports or Admin Agent reviews.
Source note
Pulse published by Collab365 Spaces, reviewed by Helen Jones on . Cite as "SharePoint oversharing reports now sit behind a special admin role", Collab365 Spaces. 2 sources referenced.