Security weirdness - due to new releases/announcements at SPC19?

%3CLINGO-SUB%20id%3D%22lingo-sub-624073%22%20slang%3D%22en-US%22%3ERe%3A%20Security%20weirdness%20-%20due%20to%20new%20releases%2Fannouncements%20at%20SPC19%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-624073%22%20slang%3D%22en-US%22%3EHmm!%20In%20this%20case%20I%20would%20create%20a%20support%20ticket%20with%20Microsoft!%20Sounds%20like%20very%20strange%20behavior%20if%20you%E2%80%99re%20the%20only%20admin%20and%20didn%E2%80%99t%20change%20anything!%3CBR%20%2F%3E%3CBR%20%2F%3EAdam%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-624059%22%20slang%3D%22en-US%22%3ESecurity%20weirdness%20-%20due%20to%20new%20releases%2Fannouncements%20at%20SPC19%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-624059%22%20slang%3D%22en-US%22%3E%3CP%3EI'm%20putting%20this%20here%20because%20it's%20where%20we're%20seeing%20it%20the%20most.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAll%20of%20a%20sudden%20I%20cannot%20invite%20guests%20to%20a%20team.%20Could%20do%20it%20last%20week%2C%20have%20been%20doing%20it%20for%20months.%26nbsp%3B%3C%2FP%3E%3CP%3EI'm%20the%20only%20admin%2C%20and%20I've%20gone%20through%20all%20the%20settings%20and%20nothing%20has%20changed.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThen%2C%20I%20get%20a%20report%20that%20users%20just%20invited%20to%20a%20team%20can't%20access%20the%20SharePoint%20site.%3C%2FP%3E%3CP%3EThey're%20in%20the%20team%20member%20list.%3C%2FP%3E%3CP%3EI%20look%20in%20Office%20Admin%20and%20they're%20in%20the%20Office%20group.%3C%2FP%3E%3CP%3EThe%20Planner%20that%20was%20created%20from%20within%20Teams%20sees%20them%20as%20well%20and%20gives%20everyone%20access.%3C%2FP%3E%3CP%3EThe%20SharePoint%20site%20still%20shows%20only%20the%20original%202%20members%2C%20not%20the%20ones%20added%20today.%20No%20one%20else%20can%20access%20the%20site.%3C%2FP%3E%3CP%3EIf%20I%20try%20to%20add%20them%20into%20the%20group%20via%20SharePoint%2C%20it%20says%20it%20can't.%3C%2FP%3E%3CP%3ENothing%20in%20the%20Admin%20activity%20health%20feed.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAll%20the%20new%20stuff%20coming%20out%20today%20sounds%20very%20cool%2C%20but%20grrrr....%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-624059%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Egroup%20security%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESharePoint%20Online%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-624168%22%20slang%3D%22en-US%22%3ERe%3A%20Security%20weirdness%20-%20due%20to%20new%20releases%2Fannouncements%20at%20SPC19%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-624168%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F72542%22%20target%3D%22_blank%22%3E%40adam%20deltinger%3C%2FA%3E%26nbsp%3B%20I%20will%2C%20after%20lunch%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3CP%3EIt%20seems%20to%20be%20coming%20back.%20I%20can%20now%20add%20a%20guest%2C%20and%20on%20the%20SharePoint%20site%20the%20group%20members%20showed%20up%2C%20although%20some%20of%20the%20members%20still%20can't%20access%20the%20site.%20And%20Admin%20seems%20to%20be%20down%2C%20now%20I%20can't%20see%20any%20groups%20or%20users.....%20seems%20a%20transient%20thing%2C%20so%20I'll%20wait%20it%20out%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3CP%3ELesson%3A%20if%20you%20know%20there%20are%20going%20to%20be%20Microsoft%20updates%2C%20like%20at%20a%20conference%20day%201%2C%20or%20something%20big%20might%20be%20changing%2C%20expect%20breakage.%20Good%20sign%20that%20new%20features%20are%20coming%20our%20way%2C%20so%20a%20silver%20lining!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-633304%22%20slang%3D%22en-US%22%3ERe%3A%20Security%20weirdness%20-%20due%20to%20new%20releases%2Fannouncements%20at%20SPC19%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-633304%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F189854%22%20target%3D%22_blank%22%3E%40Robin%20Nilsson%3C%2FA%3E%26nbsp%3BWe're%20experiencing%20the%20same%20issues%20with%20members%20added%20to%20a%20team%20being%20unable%20to%20access%20anything%20on%20the%20sharepoint%20site.%20This%20started%20about%20two%20weeks%20ago.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-633465%22%20slang%3D%22en-US%22%3ERe%3A%20Security%20weirdness%20-%20due%20to%20new%20releases%2Fannouncements%20at%20SPC19%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-633465%22%20slang%3D%22en-US%22%3EWe%20seem%20to%20have%20cleared%20up%2C%20but%20some%20issues%20we've%20never%20seen%20before%20have%20started%20showing%20up%20in%20our%20tenant.%20We're%20a%20bit%20insulated%20because%20we%20just%20went%20live%20with%20Teams%2C%20and%20there%20are%20only%202%20SharePoint%20sites%20so%20far%20with%20heavy%20activity%20outside%20of%20the%20team%20itself.%20Our%20teams%20logos%20that%20had%20transparent%20background%20also%20disappeared%20at%20the%20same%20time%2C%20though%20the%20sites%20kept%20them%20OK.%3CBR%20%2F%3EThe%20security%20issue%20puzzles%20me%2C%20though.%20The%20group%20was%20fine%2C%20has%20all%20members.%20Teams%20understood%20the%20group.%20Planner%20understood%20the%20group.%20How%20could%20SharePoint%20not%20understand%20the%20group%3F%20Must%20be%20some%20other%20kind%20of%20caching%2Fstorage%20that%20SP%20does%20to%20use%20groups%20that%20we%20don't%20really%20see%2C%20and%20that%20was%20bogged%20down.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-633555%22%20slang%3D%22en-US%22%3ERe%3A%20Security%20weirdness%20-%20due%20to%20new%20releases%2Fannouncements%20at%20SPC19%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-633555%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F189854%22%20target%3D%22_blank%22%3E%40Robin%20Nilsson%3C%2FA%3E%26nbsp%3BWe've%20been%20live%20for%2018%20months%20and%20it's%20only%20been%20happening%20to%20new%20teams%20created%20or%20membership%20changes%20since%20the%20initial%20report.%20If%20you%20find%20out%20a%20solution%20to%20the%20security%20issues%2C%20let%20me%20know!%3C%2FP%3E%3C%2FLINGO-BODY%3E
Super Contributor

I'm putting this here because it's where we're seeing it the most.

 

All of a sudden I cannot invite guests to a team. Could do it last week, have been doing it for months. 

I'm the only admin, and I've gone through all the settings and nothing has changed.

 

Then, I get a report that users just invited to a team can't access the SharePoint site.

They're in the team member list.

I look in Office Admin and they're in the Office group.

The Planner that was created from within Teams sees them as well and gives everyone access.

The SharePoint site still shows only the original 2 members, not the ones added today. No one else can access the site.

If I try to add them into the group via SharePoint, it says it can't.

Nothing in the Admin activity health feed.

 

All the new stuff coming out today sounds very cool, but grrrr.... :)

5 Replies
Hmm! In this case I would create a support ticket with Microsoft! Sounds like very strange behavior if you’re the only admin and didn’t change anything!

Adam

@adam deltinger  I will, after lunch :)

It seems to be coming back. I can now add a guest, and on the SharePoint site the group members showed up, although some of the members still can't access the site. And Admin seems to be down, now I can't see any groups or users..... seems a transient thing, so I'll wait it out :)

Lesson: if you know there are going to be Microsoft updates, like at a conference day 1, or something big might be changing, expect breakage. Good sign that new features are coming our way, so a silver lining!

@Robin Nilsson We're experiencing the same issues with members added to a team being unable to access anything on the sharepoint site. This started about two weeks ago.

We seem to have cleared up, but some issues we've never seen before have started showing up in our tenant. We're a bit insulated because we just went live with Teams, and there are only 2 SharePoint sites so far with heavy activity outside of the team itself. Our teams logos that had transparent background also disappeared at the same time, though the sites kept them OK.
The security issue puzzles me, though. The group was fine, has all members. Teams understood the group. Planner understood the group. How could SharePoint not understand the group? Must be some other kind of caching/storage that SP does to use groups that we don't really see, and that was bogged down.

@Robin Nilsson We've been live for 18 months and it's only been happening to new teams created or membership changes since the initial report. If you find out a solution to the security issues, let me know!

www.000webhost.com