What is an Owner in M365?
Owners are defined at the point of creation for Teams and Sites, during the lifetime of each workspace the ownership may need to change.
As an Owner of the Team or Site you have the right to change the Owners either in ProvisionPoint or directly in M365.
As well as that, Teams Administrators or Global Admins can also change the ownership.
With all these possible options there is a chance that the owners will be out of sync, we recommend choosing a single point of truth.
Some of the more elevated permissions for Owners include:
- Deleting Teams or Sites
- Archiving Teams
- Manage settings
Service Instance Owners in ProvisionPoint
Any Teams/Sites that are listed in ProvisionPoint will have a Service instance owner assigned. This gives them extra rights to run actions and receive notifications within our app.
When a Team or Site is created it must have at least 1 owner assigned at the point of creation.
Use the 'Owners' field on a request form to define the Owners or via custom Columns (people picker fields) that can be included on the request form.
What is an Owner Mismatch?
The mismatch rules will check who the Owners are in M365 and Service Instance Owners in ProvisionPoint.
If there are any differences it will flag as non-compliant and the rule you choose will either notify someone, store the results or align to either the service instance owners or the M365 Owners.
Available Rules
| Rule name | Description |
| Owners Mismatch - Report | Report only on the mismatch that is configured |
| Owners Mismatch - Notify | Send an email to configured people about the non-compliance, this email will include content define in the rule. Additional configuration will be needed, read the Configure Notifications for Notify Rules article for more information |
| Owners Mismatch - Align | Align to M365 or the ProvisionPoint Service instance Owners |
We always recommend starting with a Report rule to ensure the policy brings back the results you expect before applying the action rules (Align)
Align Types
If non-compliance is found the align type will set what changes will be applied.
| Align Type | Description |
| O365 workspace | Will set service instance to match the M365 setting |
| Service Instance | Will set the M365 workspace to match the service instance setting shown in Info |
Check the Results:
Once a Compliance policy is run you can check the results in the Job Queue and in the Timeline if it is non-compliant.
Read the articles in the Job Queue section:
A Service definition can have minimum or maximum number of owners assigned or a base group set up. If the changes made by the Owners mismatch do not meet these requirements the compliance check will fail. This is to force the Ownership to be reviewed fully before a change is made.