Guest Users can't access SharePoint Website if they are also delegated Admin (MS Partner)

Dirk Stolle 0 Reputation points
2025-02-28T08:06:19.5733333+00:00

Hi everybody,

I found a confusing issue and I'd like to know if this is by design or an bug. I try to explain it:

Let's assume I am a Microsoft CSP. My company name is contoso.

I use the granular delegated admin permissions (GDAP) to administer my customers.
When I access the customer tenant, my username is replaces with "user_" followed by some numbers. This is by design with GDAP. When I sign-in as a partner admin to the customer tenant, then the customer will see in the sign-in logs something like "contoso technican" not "******@contoso.com".
I am also invited as a guest user to that tenant with my account ******@contoso.com. So when I access the tenant as a guest, my username will be ******@contoso.com.

Problem:

I am a MS Teams guest of a Team. I can access the team as ******@constoso.com and I can also access the files tab within the team and downlaod the files. But, when I try to open the files in the Browser with for example "open in SharePoint" or "open in Browser" I got the error message that I don't have permission to access this SharePoint Website and I need to request access.

What happens is that when opening the SharePoint, it obviously changes my UPN from ******@contoso.com to user_<somenumber> which is the GDAP user.User's image

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,436 questions
0 comments No comments
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.