Skip to main content

Site Ownership Policy

The site ownership policy automatically finds SharePoint sites that lack the owners they should have, including fully ownerless sites, and asks the right people to take ownership. Part of site lifecycle management in SharePoint Advanced Management, it enforces a minimum number of owners or admins per site, emails candidates when a site falls short, and can move ownerless sites to read-only or archive. Every site needs someone accountable, and this policy makes that automatic.
Related Features
Change History Report, Inactive Site Policies, SharePoint Advanced Management (SAM), Site Permissions Across Your Organization

Common Use Cases

  • Finding ownerless sites: catching sites with no accountable owner
  • Enforcing minimum owners: requiring up to 2 owners or admins per site
  • Departure resilience: keeping sites governed when an owner leaves
  • Prompting new owners: asking active members to take ownership
  • Copilot accountability: ensuring every site Copilot reads has someone responsible
  • Safe dry runs: using simulation mode before enforcing

Benefits

  • Eliminates ownerless sites: finds and fixes sites with nobody accountable
  • Smart recipient targeting: owners, admins, managers of departed owners, and active members
  • Enforcement where it counts: read-only or archive for fully ownerless sites
  • Gentle nudges otherwise: single-owner sites get notifications, not hard enforcement
  • Simulation first: a dry run before going active
  • Audit-ready report: a CSV of every noncompliant site with full context

How It Works

  • Lives in the SharePoint Admin Center: App Launcher, Admin, SharePoint admin center, Site lifecycle management under Policies, Site ownership policies, Open, Create policy
  • Define responsibility and minimum: site owners, admins, or both, up to 2 (Microsoft recommends 2)
  • Identifies and notifies: flags noncompliant sites and emails the people who can fix them – current owners and admins, managers of departed owners, and active members who can accept ownership
  • Enforces only fully ownerless sites: read-only or archive; single-owner violations get nudge notifications instead
  • Admin only: only SharePoint administrators can create and manage policies
  • Licensing: the tenant needs either the SharePoint Advanced Management add-on license or a Microsoft 365 Copilot license, which includes Advanced Management

Limits and Nuances

  • Modes: run a simulation policy or an active policy that runs monthly
  • Define responsibility and minimum: require site owners, admins, or both, up to 2 (Microsoft recommends 2)
  • Recipients and scope: notify owners, admins, managers of departed owners, and active members (at least three options recommended); scope by template, creation source, sensitivity label, or a CSV of up to 10,000 URLs
  • Enforcement: do nothing, read-only, or archive applies to fully ownerless sites only; single-owner violations get notifications
  • Manager notifications are time-sensitive: user details are deleted 30 days after someone leaves, so managers may receive only one notification, or none if the policy runs later

Common Questions About the Site Ownership Policy

What does the site ownership policy do?

It monitors every site in scope against a minimum owner or admin count you define, identifies noncompliant sites, and emails the people best placed to fix it – current owners and admins, managers of departed owners, and active site members who can accept ownership directly from the email.

What license is required for the site ownership policy?

You need either the SharePoint Advanced Management add-on license or a Microsoft 365 Copilot license, which includes Advanced Management. Licensing packages change often, so check Microsoft’s official requirements before planning around it.

Who gets notified about an ownerless site?

Depending on your configuration: current site owners, current site admins, managers of previous owners or admins who left the organization, and active site members – people with activity in the last 180 days, excluding guests – who can accept ownership. Microsoft recommends selecting at least three recipient options.

What enforcement actions are available?

For fully ownerless sites: do nothing, set the site to read-only, or archive it after a configurable read-only period via Microsoft 365 Archive. Sites that have one owner but fall short of your minimum get notifications only – no hard enforcement.

Why does Microsoft recommend two owners per site?

One owner is a single point of failure: when that person leaves or changes roles, the site becomes ownerless and decisions about its content stall. A second owner keeps the site governed through departures – which is why the policy lets you require up to 2.

How does this help with Microsoft 365 Copilot readiness?

Copilot reads whatever sites your users can access – and an ownerless site is a site where nobody is accountable for what is stored, shared, or outdated. Enforcing ownership means every site Copilot draws from has someone responsible for keeping it accurate and properly secured.