Microsoft 365 Group in SharePoint: Membership and Permissions
A Microsoft 365 Group is a shared membership and permissions service used across Microsoft 365. A group-connected SharePoint team site uses the group's Owners and Members to grant site access, and the same membership can support connected resources such as Teams, a group mailbox, a shared calendar, and Planner, depending on how the workspace is configured.
What Microsoft 365 Group Means in SharePoint
The group is not simply another SharePoint permission group. It is a Microsoft 365 identity and membership object that connects people to multiple collaborative services. When someone becomes a Microsoft 365 Group owner or member, that relationship normally carries into the associated team site and other group-connected resources.
This shared membership reduces duplicate administration, but it also means a change made in Teams, Outlook, the Microsoft 365 admin center, or another connected experience can affect SharePoint access. Visitors who only need read access are usually handled through the SharePoint Visitors group because Microsoft 365 Groups do not provide a view-only membership role.
Why It Matters to the Business
For a project or department, one membership list can make collaboration simpler: the same team can access conversations, meetings, plans, and shared documents without separate manual rosters. That consistency is valuable when onboarding and offboarding are managed deliberately.
Confusion arises when a workspace has group members plus users granted access directly in SharePoint. Those directly added users may see the site but not the group's other services. Business owners should know which membership method is authoritative and avoid unexplained exceptions.
What SharePoint Administrators Need to Know
For group-connected team sites, Microsoft recommends managing permissions through the associated Microsoft 365 Group or Teams. Group owners become site owners and group members become site members. Private and shared channel sites have additional rules and must have membership managed in Teams rather than separately in SharePoint.
Administrators should govern who can create groups, require accountable owners, review guests and inactive workspaces, and understand the effect of privacy and sensitivity settings. They should also avoid casually breaking the relationship between group membership and SharePoint access, because split administration is harder to audit and explain.
What to Consider
Choose an authoritative membership path
For a Teams-connected or group-connected team site, manage owners and members through the group or Team unless a documented exception is necessary.
Handle readers separately
Use the SharePoint Visitors group for people who need read-only site access without membership in the group's collaborative services.
Review the entire workspace
When closing, renaming, or changing a group, assess its SharePoint site, Teams connection, mailbox, calendar, Planner, guests, and retention needs together.
Practical Takeaway
A Microsoft 365 Group is a shared membership boundary; treat its connected site and services as one governed workspace.
How This Shows Up in the Field
Project onboarding
Adding a new project manager as a group member can grant access to the connected team site and collaborative services without maintaining separate lists for every application.
Read-only stakeholder
An executive who only needs to view published project documents can be placed in the SharePoint Visitors group instead of becoming an editing member of the Microsoft 365 Group.
Microsoft 365 Group, SharePoint group, and security group
| Microsoft 365 Group | A cross-service membership object that connects owners and members to a SharePoint team site and other Microsoft 365 collaboration resources. |
|---|---|
| SharePoint group | A site-scoped collection such as Owners, Members, or Visitors that receives a SharePoint permission level within that site. |
| Microsoft Entra security group | An identity group used to grant access to resources and policies; it does not itself provide the collaborative resources associated with a Microsoft 365 Group. |
Related 6SC Services and Proof
Related SharePoint Glossary Terms
Frequently Asked Questions
Is a Microsoft 365 Group the same as a SharePoint group?
No. A Microsoft 365 Group spans services and provides shared owners and members. A SharePoint group is scoped to a site and receives a SharePoint permission level, such as Read, Edit, or Full Control.
Does every SharePoint site have a Microsoft 365 Group?
No. Modern group-connected team sites normally have one, while communication sites are not group-connected by default. Nongroup team sites and certain specialized sites can also use SharePoint permissions without a Microsoft 365 Group.
Where should team-site membership be managed?
For group-connected team sites, Microsoft recommends managing owners and members through the Microsoft 365 Group or Teams. Direct SharePoint permissions should be limited to clear cases such as read-only Visitors or documented exceptions.
What happens when a user is added directly to SharePoint instead of the group?
The user may gain access to the site but not to other group resources such as the connected mailbox, calendar, Planner, or Team. This split can create confusing access and should be intentional and documented.
Official Microsoft References
- Sharing and permissions in the SharePoint modern experience
- Manage settings and permissions when SharePoint and Teams are integrated
- Create a Microsoft 365 group in the admin center
Editorial review date: July 13, 2026. Product status and licensing can change; confirm current Microsoft documentation before implementation.
Simplify group-connected SharePoint access
6SC can assess Microsoft 365 Group ownership, membership, guest access, and connected sites, then define a permission and lifecycle model your teams can operate.
Talk with 6SC