SharePoint Private Channel Site Permissions Do Not Match Teams: What Site Owners Should Check

When you create a private channel in Microsoft Teams, SharePoint creates a separate site collection for that channel. The permissions on this site should mirror the membership of the private channel in Teams. However, site owners often find that users who are members of the private channel in Teams cannot access the SharePoint site, or that users who are not channel members appear in the site permissions. This mismatch happens because SharePoint and Teams handle permission inheritance differently for private channel sites. This article explains why the permissions diverge and provides the steps site owners should check to align them.

Why SharePoint Permissions Do Not Match Teams for Private Channels

A private channel in Teams creates a hidden Microsoft 365 group. This group is not visible in the Teams client or in the standard Groups list in the admin center. SharePoint creates a separate site collection for that private channel and assigns the hidden group as the site members group. Only members of the hidden group can access the private channel site.

The root cause of permission mismatches is that SharePoint site owners sometimes add or remove users directly in the SharePoint site permissions. When you add a user directly to the SharePoint site members group, that user does not become a member of the private channel in Teams. The user can access the SharePoint site but cannot see the private channel in Teams. Conversely, when you remove a user from the private channel in Teams, SharePoint does not automatically remove that user from the site permissions if the user was added directly. This breaks the intended permission mirroring.

Another cause is that the hidden group membership can be stale due to synchronization delays. Changes made in Teams can take up to 24 hours to propagate to the SharePoint permissions. Site owners who check permissions immediately after adding a member in Teams may see the mismatch temporarily.

Steps to Check and Align Private Channel Permissions

1. Open the SharePoint admin center
   Go to https://admin.microsoft.com and sign in as a SharePoint admin or global admin. In the left navigation, select Show all and then choose SharePoint. This opens the SharePoint admin center.
2. Find the private channel site collection
   In the SharePoint admin center, select Active sites. Look for a site with a name that includes the parent team name and the private channel name. For example, if the team is named “Marketing” and the private channel is named “Campaigns,” the site URL will be similar to /sites/Marketing-Campaigns. Click the site name to open its details.
3. Review the site permissions
   On the site details page, select the Permissions tab. Under Site admins, you will see the site owners. Under Site members, you will see the hidden Microsoft 365 group that backs the private channel. Do not add or remove users directly here. Instead, note the group name.
4. Check the hidden group membership in the Microsoft 365 admin center
   Go to the Microsoft 365 admin center at https://admin.microsoft.com. Select Teams & groups and then Active teams & groups. Under the Microsoft 365 groups tab, search for the hidden group name you noted. The group name typically starts with an underscore and contains a GUID. Click the group to open it. Under the Members tab, you will see the list of users who are members of the private channel. This list should match the private channel membership in Teams.
5. Verify membership in Teams
   Open Microsoft Teams and navigate to the private channel. Select the channel name and choose Manage channel. Under the Members tab, you will see the list of members. Compare this list with the hidden group membership in the admin center. If they do not match, the hidden group is out of sync.
6. Remove direct SharePoint permissions
   If you find users in the SharePoint site members group who are not in the private channel membership, remove them. Go back to the SharePoint site permissions page. Select the user or group and choose Remove user permissions. Do this for each user who should not have access. This aligns the SharePoint permissions with Teams.
7. Add users only through Teams
   To grant access to the private channel site, always add the user to the private channel in Teams. In Teams, select the channel, choose Manage channel, and then Add member. Enter the user name and select Add. Wait at least 30 minutes for the hidden group to sync. Then verify the user appears in the SharePoint site permissions.

If Permissions Still Do Not Match After Checking

“I removed a user from Teams but they still have access to the SharePoint site”

This happens when the user was added directly to the SharePoint site permissions in addition to being a Teams member. When you remove the user from Teams, the hidden group membership updates, but the direct SharePoint permission remains. To fix this, follow step 6 above to manually remove the user from the SharePoint site members group. After removal, the user will lose access to the site.

“I added a user to Teams but they cannot access the SharePoint site after 24 hours”

First confirm that the user was added to the correct private channel. In Teams, open the private channel and select Manage channel. Verify the user appears in the member list. If they do, the hidden group may not have synced. You can force a sync by asking a Teams admin to run the Sync-MsolGroup PowerShell cmdlet for the hidden group. Alternatively, wait another 24 hours. If the user still cannot access the site, check if the user already has access through a different group or through the parent team site. Inherited permissions from the parent team can override private channel permissions.

“The hidden group does not appear in the Microsoft 365 admin center”

The hidden group may not appear if you are not a global admin or Teams admin. Only global admins and Teams service admins can see hidden groups in the admin center. If you are a site owner but not an admin, you cannot view the hidden group directly. In that case, rely on the Teams client to manage membership. Always add and remove users through Teams, and check the SharePoint site permissions page to see the resulting members group.

Private Channel Site vs Standard Channel Site: Key Differences

Item	Private Channel Site	Standard Channel Site
Site collection	Separate site collection created for each private channel	No separate site collection; uses the parent team site
Permission inheritance	Does not inherit permissions from the parent team; uses a hidden Microsoft 365 group	Inherits permissions from the parent team site
Membership management	Only through Teams private channel membership; direct SharePoint edits break sync	Through Teams team membership or directly in SharePoint
Visibility in admin center	Hidden group visible only to global admins and Teams admins	Standard group visible to all admins
Sync delay	Up to 24 hours for membership changes to appear in SharePoint	Near real-time for most changes

Now you can check and correct private channel site permissions by always using Teams for membership changes. Avoid adding users directly in SharePoint. If you see a mismatch, remove direct permissions and verify the hidden group membership. For persistent sync issues, force a sync using PowerShell or wait 24 hours.