Site Collection Admin Cannot Access Settings: User-Safe Fix

You are a site collection administrator in SharePoint, but when you try to open Site Settings or site permissions, you see an access denied error. This problem usually occurs because the site collection admin permissions were not applied correctly during site creation or after a migration. This article explains why the error happens and provides a user-safe fix that does not require running PowerShell or changing tenant-level settings.

Why a Site Collection Admin Cannot Access Settings

The root cause is that the site collection administrator account is missing from the site collection owner list. This can happen in several scenarios. When a site is created through a Microsoft 365 group, the group owner becomes the site collection admin, but if the group is deleted or changed, the admin link breaks. During a cross-tenant migration or a site move, the site collection admin permissions may not transfer correctly. Also, when a site is restored from the recycle bin, the original admin settings are sometimes lost.

SharePoint uses two levels of admin for a site: site collection administrator and site owner. The site collection administrator has full control over site settings, including permissions, features, and storage. Site owners have less control and cannot access certain settings like site collection features or the site collection admin list itself. If your account is a site owner but not a site collection admin, you see access denied when trying to open settings that require full control.

Another common cause is that the site collection admin was set using a user principal name that changed after a domain rename or a user alias update. SharePoint stores the user identity as a claim, and if the claim is no longer valid, the system treats the user as unknown and denies access. In all these cases, the fix is to add the correct user account back to the site collection owner list.

Steps to Add Yourself as a Site Collection Administrator

You can fix this problem without running PowerShell or contacting Microsoft support. Use the SharePoint admin center to re-add your account as a site collection admin. Follow these steps.

1. Open the SharePoint admin center
   Sign in to Microsoft 365 admin center at admin.microsoft.com. In the left navigation, select Admin centers and then SharePoint. This opens the SharePoint admin center.
2. Navigate to Active sites
   In the SharePoint admin center, select Active sites from the left menu. A list of all sites in your tenant appears.
3. Find the affected site
   Use the search box to find the site where you cannot access settings. Click the site name to open its details panel.
4. Open the site settings
   In the details panel, select the Settings tab. Scroll down to the Site collection owners section.
5. Add your account
   Click Add a site collection owner. Type your email address or display name. Click Save. Your account is now added as a site collection admin.
6. Verify access
   Open the site in a new browser tab. Navigate to the gear icon and select Site settings. You should now see all settings options without errors.

If you cannot access the SharePoint admin center because you are not a tenant admin, ask another tenant admin to perform these steps for you. Alternatively, use the site permissions page if you still have owner-level access to the site.

Alternative Method Using Site Permissions

If you have site owner permissions but not site collection admin, you can promote yourself through the site permissions page. This method works only if another site collection admin already exists.

1. Go to the affected site
   Open the site in your browser. Click the gear icon and select Site permissions.
2. Open Advanced permissions settings
   On the Site permissions page, click Advanced permissions settings. This opens the classic permissions page.
3. Check the site collection admin list
   On the ribbon, click Site collection administrators. A dialog box shows the current administrators.
4. Add yourself
   If the list is empty or does not include you, type your account name and click OK. You must have full control permissions to perform this action.

If SharePoint Still Has Issues After the Main Fix

Site collection admin list is empty and you cannot add anyone

If the site collection admin list is empty and you cannot add anyone because the Add button is grayed out, the site might be orphaned. This happens when the site was created through a SharePoint group and the group was deleted. In this case, only a tenant admin can fix it. The tenant admin must use the SharePoint admin center to add a site collection owner as described in the main steps above. If the admin center does not allow changes, run the Set-SPOSite PowerShell cmdlet with the -Owner parameter.

Changes do not save or show an error

If you try to add a site collection admin but the save fails, check that the user account is active in Microsoft 365. Expired or deleted accounts cannot be added. Also verify that the site is not in read-only mode. Go to the SharePoint admin center, select the site, and check the Settings tab for any lock status. If the site is locked, unlock it first.

Access still denied after being added as admin

If you are listed as a site collection admin but still see access denied, clear your browser cache and cookies. Then sign out and sign back in to Microsoft 365. If the problem persists, check if the site uses custom permissions that override the admin role. Go to Site permissions and click Check permissions to see your effective permissions.

Site Collection Admin vs Site Owner: Key Differences

Item	Site Collection Admin	Site Owner
Access to Site Settings	Full access to all settings including site collection features	Limited access, cannot see site collection admin section
Manage site permissions	Can add and remove any user including site collection admins	Can add and remove users but cannot promote to site collection admin
Storage and quota	Can view and change site storage limits	Cannot change storage limits
Site collection recycle bin	Can access and restore items from second-stage recycle bin	Can only access first-stage recycle bin

After completing the fix, you can now access all site settings as a site collection administrator. To prevent this problem in the future, always keep at least two users as site collection admins. Use the SharePoint admin center to periodically review site collection owner lists for orphaned sites. If you manage many sites, consider using the Site collection admin report in the SharePoint admin center to audit all sites at once.