Ownerless and Inactive SharePoint Sites - The Copilot Governance Problem
Microsoft's own Copilot deployment guidance explicitly identifies ownerless and inactive SharePoint sites as a governance risk. An ownerless site has no one accountable for its content or permissions. An inactive site has content that nobody has reviewed recently. Copilot agents in particular traverse these sites when answering queries - surfacing content that nobody has looked at in years from sites that nobody is managing.
How sites become ownerless
Every SharePoint site is created with at least one owner. The problem is that ownership is tied to individuals, and individuals change roles, leave organisations, or simply stop being the right person for a site over time.
A project site created in 2022 had three owners - all of whom have since left the business. The site still exists, with its original content and permissions, but nobody with owner-level access is still at the organisation. If the site membership included departed employees, their accounts may also still be in the membership lists.
This is a common pattern across organisations of every size. SharePoint sites are created frequently and easily. They are rarely formally closed or decommissioned. The result is an accumulating inventory of sites with no active governance.
Why this matters specifically for Copilot
Before Copilot, ownerless sites were a governance problem but a contained one. Users who knew about a site could access it, but the content remained practically obscure to anyone who was not actively looking for it.
Copilot agents change this. When a Copilot agent is given broad access to SharePoint - for example, an agent configured to answer questions about your organisation's documents - it traverses all SharePoint content the querying user can access. This includes ownerless sites, inactive sites, and sites whose content has not been reviewed in years.
The risk is not theoretical. A common scenario: a staff member asks a Copilot agent to find all documentation related to a client. The agent returns files from a project site created three years ago that includes a contract, some internal risk notes, and an email thread saved to SharePoint. The site has been inactive for two years. Nobody remembered it existed. Nobody checked what was in it before Copilot was deployed.
How to find ownerless and inactive sites
Tools available in Microsoft 365
- SharePoint admin centre - Sites overview: the 'Primary admin' column shows the current site owner. Sites with no primary admin, or with a primary admin whose account is disabled, are effectively ownerless.
- SharePoint admin centre - Activity filter: filter sites by last activity date. Sites with no activity in the past 90 or 180 days are candidates for review.
- Microsoft 365 admin centre - Inactive teams and groups report: shows Microsoft 365 Groups (and their associated SharePoint sites) with no recent activity.
- Microsoft Purview - Data access governance: includes reports specifically designed for Copilot readiness, including sites with no owners and sites with broad access but no recent activity.
- PowerShell - Get-SPOSite: for more detailed analysis, the SharePoint Online PowerShell module allows bulk export of site properties including owner and last modified date.
What to do with what you find
- 01
Assign owners to ownerless sites
For each ownerless site, identify the most appropriate current owner - typically the manager of the team the site was created for, or the person who inherited the relevant business function. Assign them as site owner. They do not need to actively manage the site day-to-day, but they need to be accountable for it.
- 02
Review content on inactive sites before archiving
Before archiving or deleting an inactive site, the newly assigned owner should review the content. Some inactive sites contain important historical records that need to be retained. Others are safe to archive. The decision requires human judgement - do not automatically delete inactive sites without review.
- 03
Archive sites that are inactive but need to be retained
Microsoft introduced SharePoint site archiving to handle this pattern. Archived sites remain accessible for legal and compliance purposes but are removed from active search and Copilot's active dataset. This is often the right outcome for genuinely inactive sites: retain for compliance, exclude from Copilot.
- 04
Delete sites that contain no content worth retaining
Some sites were created for short-term purposes and contain nothing of ongoing value. After confirming with the assigned owner, delete these sites. They have a 93-day soft-delete window before permanent deletion.
- 05
Implement site lifecycle policies going forward
The underlying problem is that SharePoint sites are created without a defined lifecycle. Implement a policy that requires a nominated owner for any new site and sets a review process for sites with no activity after 180 days. Microsoft Syntex SharePoint Advanced Management includes automated site lifecycle management tools.
The number of ownerless sites in a mature Microsoft 365 tenant is almost always higher than anyone expects. A business that has been on Microsoft 365 for five years typically has dozens of sites that nobody is actively responsible for. The Copilot deployment is an opportunity to address this - but only if the review happens before deployment, not after.
The connection to Copilot agents
Copilot agents - autonomous agents built on Microsoft's Copilot framework - are explicitly designed to traverse SharePoint content when answering questions. Unlike the base Copilot experience, which retrieves content in response to a user's direct query, agents can be configured to proactively search across specified data sources.
This makes the ownerless site problem more acute for organisations deploying agents than for those using only the base Copilot experience. An agent given access to 'all SharePoint content' will include ownerless sites in its dataset. Scoping agents to specific, governed SharePoint sites - rather than the full tenant - is the recommended approach while the broader site inventory is being remediated.
Next step
Copilot Readiness Assessment
The Copilot Readiness Assessment includes a review of ownerless and inactive sites in your tenant, a prioritised remediation plan, and recommendations for site lifecycle governance before Copilot deployment.
Learn more