Skip to content

Sites Without an Active Owner

The question it answers: Which SharePoint sites have no active owner, or only one, so nobody reviews who has access?

Every site needs someone who can answer access requests, review sharing and decide when content can go. Sites whose group has no owner, whose owners have all left, or whose primary owner is disabled or deleted are ungoverned - nobody reviews who has access.

Where in the appSharePoint Online › Sharing & Governance › Sites Without an Active Owner
WorkloadSharePoint Online
KindTable · dashboard tile
DataRead from Microsoft 365 when someone first opens it, then kept for the report cache lifetime (Settings > Data & cache, 1 hour unless changed). It reads through PowerShell (Exchange Online or SharePoint Online), so the first load takes longer than a Graph report.
LicenceSharePoint Online.
Report id (API and MCP)sharepoint.governance.sites-without-owner
ColumnKeyType
SiteTitleLink
StatusProblemStatus
TypeKindStatus
OwnersOwnersText
Active ownersActiveOwnersText
GroupGroupIdLink
Last content changeLastContentModifiedDate
Storage (GB)StorageUsedGbText
FilterKey (API)On when the page opens
Only sites with an ownership problemproblemsYes

Licence: SharePoint Online.

Application permissions on the IntensiveReports app registration (all permissions):

PermissionAPIWhat it allowsNote
Sites.FullControl.AllOffice 365 SharePoint OnlineHave full control of all site collectionsapplication, certificate
Group.Read.AllMicrosoft GraphRead all groups
User.Read.AllMicrosoft GraphRead all users’ full profiles
User-LifeCycleInfo.Read.AllMicrosoft GraphRead all users’ lifecycle information
Data sources it reads
  • Get-PnPTenantSite -Detailed (Owner, GroupId)
  • GET /v1.0/groups?$filter=groupTypes/any(c:c eq 'Unified')&$expand=owners
  • GET /v1.0/users
GET /ir-api/v1/reports/sharepoint.governance.sites-without-owner?size=100
GET /ir-api/v1/reports/sharepoint.governance.sites-without-owner?filter=problems

An AI assistant reads it with the MCP tool get_report and the id sharepoint.governance.sites-without-owner. The client needs the Read grant for SharePoint Online. See Using the API.