We would like to set up a Document Library in a SharePoint Online site with different members, visitors and owners than the Site the Document Library will be created in. It works very well (we have different population for visitors [read] and “members” [edit]) but we can’t prevent parent Site Owner’s from having ~Full Control access to the Library even if they do not have explicit Full Control permission on (they are not owner of) the Library. Please note: These owners are NOT Sites Collection Administrators (which, we know, cannot be denied access to a library). Thanks, Pierre
Sorry, I misexplain this – I created the site an de was indeed in the Site Collection administrator – that was not the point.
What was strange though is that later, I enroll other colleagues which I made owner (using the new Modern panel to do so) – I did NOT explicitely made them Site Collection Administrators, I expected then them being just Site Owners, without being administrators (we want to be able to have some restricted access component on our SharePoint which Site Owners -but not Site Collection Administrators, would not have access to). The fact is that it appeared that even if not visible in the Site Collection Administrators list, they actually were made Administrators – i.e. In the special Modern SP365 User enrollment panel, Owner=Site Collection Administrator which is misleading.
Thanks – regards, Pierre
