Merge pull request #682 from MicrosoftDocs/global-admin-security

Stacyrch140 · web-flow · commit dd11590f58eb · 2024-09-03T17:04:19.000-04:00
update powershell articles mentioning glob admin
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/Get-SPOTenantLogEntry.md b/sharepoint/sharepoint-ps/sharepoint-online/Get-SPOTenantLogEntry.md
@@ -50,7 +50,7 @@ For Beta 2, the only company logs available are for Business Connectivity Servic
 > [!NOTE]
 > If you do not use any parameter, the first 1000 rows in descending time range are returned.  
 
-You must be a SharePoint Online administrator or Global Administrator to run the cmdlet.
+You must be at least a SharePoint Online administrator to run the cmdlet.
 
 For permissions and the most current information about Windows PowerShell for SharePoint Online, see the online documentation at [Intro to SharePoint Online Management Shell](https://learn.microsoft.com/powershell/sharepoint/sharepoint-online/introduction-sharepoint-online-management-shell?view=sharepoint-ps).
 
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/Get-SPOTenantLogLastAvailableTimeInUtc.md b/sharepoint/sharepoint-ps/sharepoint-online/Get-SPOTenantLogLastAvailableTimeInUtc.md
@@ -27,7 +27,7 @@ Get-SPOTenantLogLastAvailableTimeInUtc [<CommonParameters>]
 This cmdlet retrieves the time in Coordinated Universal Time (UTC) when the logs were last collected.
 After you know the time, you can use the `Get-SPOTenantLogEntry` cmdlet to retrieve the logs.
 
-You must be a SharePoint Online administrator or Global Administrator to run the cmdlet.
+You must be at least a SharePoint Online administrator to run the cmdlet.
 
 For permissions and the most current information about Windows PowerShell for SharePoint Online, see the online documentation at [Intro to SharePoint Online Management Shell](https://learn.microsoft.com/powershell/sharepoint/sharepoint-online/introduction-sharepoint-online-management-shell?view=sharepoint-ps).
 
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/Get-SPOTenantRenameSitePrioritization.md b/sharepoint/sharepoint-ps/sharepoint-online/Get-SPOTenantRenameSitePrioritization.md
@@ -24,7 +24,8 @@ This cmdlet can be used to view the currently prioritized sites, as part of [Adv
 
 The output is a list of all site URLs, one per row. If desired, the output can be downloaded using the standard PowerShell Out-File option. If you want just the count of prioritized sites, you can use the standard Measure-Object option.
 
-You must be a SharePoint or Global Administrator to run this cmdlet.
+You must be at least a SharePoint Online administrator to run the cmdlet.
+
 ## EXAMPLES
 ### Example 1
 ```powershell
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/Get-SPOTenantSyncClientRestriction.md b/sharepoint/sharepoint-ps/sharepoint-online/Get-SPOTenantSyncClientRestriction.md
@@ -28,7 +28,7 @@ The `Get-SPOTenantSyncClientRestriction` cmdlet returns whether the TenantRestri
 
 This cmdlet, that does not take any input, also returns the current state of the BlockMacSync and GrooveBlockOption properties.
 
-You must be a SharePoint Online administrator or Global Administrator to run the cmdlet.
+You must be at least a SharePoint Online administrator to run the cmdlet.
 
 Requires a valid `Connect-SPOService` context to identify the tenant. For information on how to connect to the tenant, see `Connect-SPOService`.
 
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/Get-SPOUser.md b/sharepoint/sharepoint-ps/sharepoint-online/Get-SPOUser.md
@@ -44,7 +44,7 @@ For more information about how to use parameter sets, see [Cmdlet Parameter Sets
 
 The `Get-SPOUser` cmdlet matches one and only one user or security group.
 
-Be sure to run the `Get-SPOUser` cmdlet using a SharePoint Online administrator or Global Administrator and be a site collection administrator of the queried site.
+Be sure to run the `Get-SPOUser` cmdlet as at least a SharePoint Online administrator and be a site collection administrator of the queried site.
 
 For permissions and the most current information about Windows PowerShell for SharePoint Online, see the online documentation at <https://go.microsoft.com/fwlink/p/?LinkId=251832>.
 
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/Get-SPOWebTemplate.md b/sharepoint/sharepoint-ps/sharepoint-online/Get-SPOWebTemplate.md
@@ -27,7 +27,7 @@ Get-SPOWebTemplate [[-LocaleId] <UInt32>] [-CompatibilityLevel <Int32>] [-Name <
 
 The `Get-SPOWebTemplate` cmdlet displays all site templates that match the given identity and are available in SharePoint Online.
 
-You must be a SharePoint Online administrator or Global Administrator to run the cmdlet.
+You must be at least a SharePoint Online administrator to run the cmdlet.
 
 For permissions and the most current information about Windows PowerShell for SharePoint Online, see the online documentation at [Intro to SharePoint Online Management Shell](https://learn.microsoft.com/powershell/sharepoint/sharepoint-online/introduction-sharepoint-online-management-shell?view=sharepoint-ps).
 
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/New-SPOSite.md b/sharepoint/sharepoint-ps/sharepoint-online/New-SPOSite.md
@@ -29,7 +29,7 @@ New-SPOSite [-CompatibilityLevel <Int32>] [-LocaleId <UInt32>] [-NoWait] -Owner
 The `New-SPOSite` cmdlet creates a new site collection for the current company.
 However, creating a new SharePoint Online site collection fails if a deleted site with the same URL exists in the Recycle Bin.
 
-You must be a SharePoint Online administrator or Global Administrator to run the cmdlet.
+You must be at least a SharePoint Online administrator to run the cmdlet.
 
 For permissions and the most current information about Windows PowerShell for SharePoint Online, see the online documentation at <https://go.microsoft.com/fwlink/p/?LinkId=251832>.
 
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/New-SPOSiteGroup.md b/sharepoint/sharepoint-ps/sharepoint-online/New-SPOSiteGroup.md
@@ -27,7 +27,7 @@ New-SPOSiteGroup -Group <String> -PermissionLevels <String[]> -Site <SpoSitePipe
 A SharePoint group is a set of individual users.
 SharePoint groups enable you to manage sets of users instead of individual users.
 
-You must be a SharePoint Online administrator or Global Administrator and be a site collection administrator to run the cmdlet.
+You must be at least a SharePoint Online administrator to run the cmdlet.
 
 For permissions and the most current information about Windows PowerShell for SharePoint Online, see the online documentation at [Intro to SharePoint Online Management Shell](https://learn.microsoft.com/powershell/sharepoint/sharepoint-online/introduction-sharepoint-online-management-shell?view=sharepoint-ps).
 
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/Remove-SPOContainer.md b/sharepoint/sharepoint-ps/sharepoint-online/Remove-SPOContainer.md
@@ -29,7 +29,7 @@ The `Remove-SPOContainer` cmdlet deletes a File Storage Container and puts it in
 
 When admins delete a Container, it is moved into the Recycle Bin. A deleted Container can be [restored](./Restore-SPODeletedContainer.md) from the Recycle Bin within 93 days. If a Container is deleted from the Recycle Bin, or it exceeds the 93-day retention period, it is permanently deleted. Deleting a Container deletes everything within it, including all documents and files. You can view all deleted Containers in the Recycle Bin with the [`Get-SPODeletedContainer`](./Get-SPODeletedContainer.md) cmdlet.
 
-You must be a SharePoint Online Administrator or Global Administrator to run this cmdlet.
+You must be at least a SharePoint Online administrator to run the cmdlet.
 
 ## EXAMPLES
 
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/Remove-SPODeletedContainer.md b/sharepoint/sharepoint-ps/sharepoint-online/Remove-SPODeletedContainer.md
@@ -28,7 +28,7 @@ Remove-SPODeletedContainer [-Identity <ContainerId>] [<CommonParameters>]
 
 ## DESCRIPTION
 
-The `Remove-SPODeletedContainer` cmdlet permanently removes a deleted File Storage Container from the Recycle Bin. A permanently deleted Container cannot be recovered. You must be a SharePoint Administrator or Global Administrator to run the cmdlet.
+The `Remove-SPODeletedContainer` cmdlet permanently removes a deleted File Storage Container from the Recycle Bin. A permanently deleted Container cannot be recovered. You must be at least a SharePoint Online administrator to run the cmdlet.
 
 > [!IMPORTANT]
 > We do not generally recommend that you permanently delete Containers.
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/Remove-SPODeletedSite.md b/sharepoint/sharepoint-ps/sharepoint-online/Remove-SPODeletedSite.md
@@ -26,7 +26,7 @@ Remove-SPODeletedSite [-Confirm] -Identity <SpoSitePipeBind> [-NoWait] [-WhatIf]
 
 The `Remove-SPODeletedSite` cmdlet permanently removes a SharePoint Online deleted site collection from the Recycle Bin.
 
-You must be a SharePoint Administrator or Global Administrator to run the cmdlet.
+You must be at least a SharePoint administrator to run the cmdlet.
 
 For permissions and the most current information about Windows PowerShell for SharePoint Online, see the online documentation at [Intro to SharePoint Online Management Shell](https://learn.microsoft.com/powershell/sharepoint/sharepoint-online/introduction-sharepoint-online-management-shell?view=sharepoint-ps).
 
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/Remove-SPOGeoAdministrator.md b/sharepoint/sharepoint-ps/sharepoint-online/Remove-SPOGeoAdministrator.md
@@ -30,7 +30,7 @@ For more information about how to use parameter sets, see [Cmdlet parameter sets
 
 The `Remove-SPOGeoAdministrator` cmdlet matches a user or a security group and remove the GeoAdministrator privileges in the SharePoint Organization.
 
-You must be a SharePoint Online administrator or Global Administrator, and you must have a Multi-Geo Tenant to run the `Remove-SPOGeoAdministrator` cmdlet successfully.
+You must be at least a SharePoint Online administrator, and you must have a Multi-Geo Tenant to run the `Remove-SPOGeoAdministrator` cmdlet successfully.
 
 For permissions and the most current information about Windows PowerShell for SharePoint Online, see the online documentation at [Intro to SharePoint Online Management Shell](https://learn.microsoft.com/powershell/sharepoint/sharepoint-online/introduction-sharepoint-online-management-shell?view=sharepoint-ps).
 
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/Remove-SPOSite.md b/sharepoint/sharepoint-ps/sharepoint-online/Remove-SPOSite.md
@@ -29,7 +29,7 @@ Instead, the removed site collection is moved to the Recycle Bin.
 You can use the `Restore-SPODeletedSite`cmdlet to restore a site collection from the Recycle Bin.
 To delete a site collection permanently, first move the site collection to the Recycle Bin by using the `Remove-SPOSite` cmdlet and then delete it from the Recycle Bin by using the `Remove-SPODeletedSite` cmdlet.
 
-You must be a SharePoint Online administrator or Global Administrator and be a site collection administrator to run the cmdlet.
+You must be at least a SharePoint Online administrator and be a site collection administrator to run the cmdlet.
 
 For permissions and the most current information about Windows PowerShell for SharePoint Online, see the online documentation at [Intro to SharePoint Online Management Shell](https://learn.microsoft.com/powershell/sharepoint/sharepoint-online/introduction-sharepoint-online-management-shell?view=sharepoint-ps).
 
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/Remove-SPOSiteGroup.md b/sharepoint/sharepoint-ps/sharepoint-online/Remove-SPOSiteGroup.md
@@ -26,7 +26,7 @@ Remove-SPOSiteGroup -Identity <String> -Site <SpoSitePipeBind> [<CommonParameter
 
 Use the `Remove-SPOSiteGroup` cmdlet to remove a group from a site collection by specifying the name of the group in the Identity parameter.
 
-You must be a SharePoint Online administrator or Global Administrator and be a site collection administrator to run the `Remove-SPOSiteGroup` cmdlet.
+You must be at least a SharePoint Online administrator and be a site collection administrator to run the `Remove-SPOSiteGroup` cmdlet.
 
 For permissions and the most current information about Windows PowerShell for SharePoint Online, see the online documentation at [Intro to SharePoint Online Management Shell](https://learn.microsoft.com/powershell/sharepoint/sharepoint-online/introduction-sharepoint-online-management-shell?view=sharepoint-ps).
 
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/Remove-SPOTenantRenameSitePrioritization.md b/sharepoint/sharepoint-ps/sharepoint-online/Remove-SPOTenantRenameSitePrioritization.md
@@ -24,16 +24,24 @@ This cmdlet can be used to remove priority previously assigned to a site as part
 
 Removing prioritization from a site means that it will be not be queued for initial execution as part of the overall rename operation. The site will still be queued for processing subsequently like any other unprioritized site, and does not get skipped from the rename.
 
-You must be a SharePoint or Global Administrator to run this cmdlet.
+You must be at least a SharePoint administrator to run the cmdlet.
+
 ## EXAMPLES
+
 ### Example 1
+
 ```powershell
 Remove-SPOTenantRenameSitePrioritization -SiteUrl https://contoso.sharepoint.com/sites/projectx
 ```
+
 This example removes the 'projectx' site from the prioritized list of sites within the Advanced Tenant Rename.
+
 ## PARAMETERS
+
 ### -SiteUrl
+
 Specifies the full site URL of the site you wish to prioritize. This can be either a OneDrive for Business or SharePoint Online site. Only a site that is currently prioritized can be removed.
+
 ```yaml
 Type: String
 Parameter Sets: (All)
@@ -45,12 +53,21 @@ Default value: None
 Accept pipeline input: False
 Accept wildcard characters: False
 ```
+
 ### CommonParameters
+
 This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see [about_CommonParameters](http://go.microsoft.com/fwlink/?LinkID=113216).
+
 ## INPUTS
+
 ### None
+
 ## OUTPUTS
+
 ### System.Object
+
 ## NOTES
+
 ## RELATED LINKS
+
 [Advanced Tenant Rename](https://aka.ms/advancedtenantrename)
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/Remove-SPOTenantSyncClientRestriction.md b/sharepoint/sharepoint-ps/sharepoint-online/Remove-SPOTenantSyncClientRestriction.md
@@ -24,7 +24,7 @@ Remove-SPOTenantSyncClientRestriction [<CommonParameters>]
 
 ## DESCRIPTION
 
-You must be a SharePoint Online administrator or Global Administrator to run the cmdlet.
+You must be at least a SharePoint administrator to run the cmdlet.
 
 Requires a valid `Connect-SPOService` context to identify the tenant. For information on how to connect to the tenant, see `Connect-SPOService`.
 
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/Remove-SPOUser.md b/sharepoint/sharepoint-ps/sharepoint-online/Remove-SPOUser.md
@@ -24,7 +24,7 @@ Remove-SPOUser [-Group <String>] -LoginName <String> -Site <SpoSitePipeBind> [<C
 
 ## DESCRIPTION
 
-You must be a SharePoint Online administrator or Global Administrator and be a site collection administrator to run the `Remove-SPOUser` cmdlet.
+You must be at least a SharePoint Online administrator and be a site collection administrator to run the `Remove-SPOUser` cmdlet.
 
 For permissions and the most current information about Windows PowerShell for SharePoint Online, see the online documentation at [Intro to SharePoint Online Management Shell](https://learn.microsoft.com/powershell/sharepoint/sharepoint-online/introduction-sharepoint-online-management-shell?view=sharepoint-ps).
 
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/Repair-SPOSite.md b/sharepoint/sharepoint-ps/sharepoint-online/Repair-SPOSite.md
@@ -32,7 +32,7 @@ The cmdlet reports the health check rules with a summary of the results.
 The rules might not support automatic repair.
 Tests without repair mode can be initiated by running the `Test-SPOSite` cmdlet.
 
-You must be a SharePoint Online administrator or Global Administrator to run the cmdlet.
+You must be at least a SharePoint administrator to run the cmdlet.
 
 For permissions and the most current information about Windows PowerShell for SharePoint Online, see the online documentation at [Intro to SharePoint Online Management Shell](https://learn.microsoft.com/powershell/sharepoint/sharepoint-online/introduction-sharepoint-online-management-shell?view=sharepoint-ps).
 
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/Request-SPOUpgradeEvaluationSite.md b/sharepoint/sharepoint-ps/sharepoint-online/Request-SPOUpgradeEvaluationSite.md
@@ -30,7 +30,7 @@ The `Request-SPOUpgradeEvaluationSite` cmdlet lets the SharePoint Online adminis
 A request for an upgrade evaluation site is not automatically processed.
 Instead, it is scheduled to occur in the background when it causes the least effect on the service.
 
-You must be a SharePoint Online administrator or Global Administrator to run the cmdlet.
+You must be at least a SharePoint administrator to run the cmdlet.
 
 For permissions and the most current information about Windows PowerShell for SharePoint Online, see the online documentation at [Intro to SharePoint Online Management Shell](https://learn.microsoft.com/powershell/sharepoint/sharepoint-online/introduction-sharepoint-online-management-shell?view=sharepoint-ps).
 
@@ -50,7 +50,7 @@ Example 1 requests a site upgrade evaluation for the marketing site <https://con
 Request-SPOUpgradeEvaluationSite https://contoso.sharepoint.com/sites/marketing -NoEmail $true -NoUpgrade $true
 ```
 
-This example requests a site upgrade evaluation for the marketing site <https://contoso.sharepoint.com/sites/marketing.> It specifies to not send email messages and not automatically try upgrade of the evaluation site. By using the cmdlet in this way, a SharePoint Online administrator or Global Administrator can make changes to the upgrade evaluation site before starting the actual upgrade.
+This example requests a site upgrade evaluation for the marketing site <https://contoso.sharepoint.com/sites/marketing.> It specifies to not send email messages and not automatically try upgrade of the evaluation site. By using the cmdlet in this way, a SharePoint Online administrator or above can make changes to the upgrade evaluation site before starting the actual upgrade.
 
 ## PARAMETERS
 
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/Restore-SPODeletedContainer.md b/sharepoint/sharepoint-ps/sharepoint-online/Restore-SPODeletedContainer.md
@@ -26,7 +26,7 @@ Restore-SPODeletedContainer [-Identity <ContainerId>] [<CommonParameters>]
 
 ## DESCRIPTION
 
-The `Restore-SPODeletedContainer` cmdlet recovers a previously deleted File Storage Container from the Recycle Bin. Restored Containers will be retrieved by the [`Get-SPOContainer`](./Get-SPOContainer.md) cmdlet. You must be a SharePoint Online Administrator or Global Administrator to run this cmdlet.
+The `Restore-SPODeletedContainer` cmdlet recovers a previously deleted File Storage Container from the Recycle Bin. Restored Containers will be retrieved by the [`Get-SPOContainer`](./Get-SPOContainer.md) cmdlet. You must be at least a SharePoint Online Administrator to run this cmdlet.
 
 
 
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/Restore-SPODeletedSite.md b/sharepoint/sharepoint-ps/sharepoint-online/Restore-SPODeletedSite.md
@@ -24,7 +24,7 @@ Restore-SPODeletedSite -Identity <SpoSitePipeBind> [-NoWait] [<CommonParameters>
 
 ## DESCRIPTION
 
-You must be a SharePoint Online administrator or Global Administrator and be a site collection administrator to run the cmdlet.
+You must be at least a SharePoint administrator to run the cmdlet.
 
 For permissions and the most current information about Windows PowerShell for SharePoint Online, see the online documentation at [Intro to SharePoint Online Management Shell](https://learn.microsoft.com/powershell/sharepoint/sharepoint-online/introduction-sharepoint-online-management-shell?view=sharepoint-ps).
 
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/Set-SPOContainer.md b/sharepoint/sharepoint-ps/sharepoint-online/Set-SPOContainer.md
@@ -32,7 +32,7 @@ Set-SPOContainer [-Identity]
 
 For any parameters that are passed in, the `Set-SPOContainer` cmdlet sets or updates the setting for the Container collection identified by the parameter Identity.
 
-You must be a SharePoint administrator or Global Administrator to run the cmdlet.
+You must be at least a SharePoint administrator to run the cmdlet.
 
 For permissions and the most current information about Windows PowerShell for SharePoint Embedded Containers, see the online documentation at [Intro to SharePoint Embedded Containers Management Shell](/powershell/sharepoint/sharepoint-online/introduction-sharepoint-online-management-shell?view=sharepoint-ps).
 
@@ -70,9 +70,9 @@ This example sets any previously set sensitivity label on the Container.
 ## PARAMETERS
 
 ### -BlockDownloadPolicy
-As a SharePoint Administrator or Global Administrator in Microsoft 365, you can block the download of files from SharePoint Embedded Containers. This feature does not need Microsoft Entra Conditional Access policies. This feature can be set for individual Containers but not at the organization level.
+As a SharePoint Administrator or above in Microsoft 365, you can block the download of files from SharePoint Embedded Containers. This feature does not need Microsoft Entra Conditional Access policies. This feature can be set for individual Containers but not at the organization level.
 
-Blocking the download of files allows users to remain productive while addressing the risk of accidental data loss. Users have browser-only access with no ability to download, print, or sync files. They also won't be able to access content through apps, including the Microsoft Office desktop apps. When web access is limited, users will see the following message at the top of Containers: "Your organization doesn't allow you to download, print, or sync from this Container. For help contact your IT department." Read the full documentation for advanced capabilities at [Block download policy for SharePoint Containers and OneDrive](/sharepoint/block-download-from-Containers).
+Blocking the download of files allows users to remain productive while addressing the risk of accidental data loss. Users have browser-only access with no ability to download, print, or sync files. They also won't be able to access content through apps, including the Microsoft Office desktop apps. When web access is limited, users will see the following message at the top of Containers: "Your organization doesn't allow you to download, print, or sync from this Container. For help contact your IT department." Read the full documentation for advanced capabilities at [Block download policy for SharePoint Containers and OneDrive](/sharepoint/block-download-from-sites).
 
 PARAMVALUE: $true | $false
 
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/Set-SPOGeoStorageQuota.md b/sharepoint/sharepoint-ps/sharepoint-online/Set-SPOGeoStorageQuota.md
@@ -24,7 +24,7 @@ Set-SPOGeoStorageQuota -GeoLocation <String> -StorageQuotaMB <Int64> [<CommonPar
 
 ## DESCRIPTION
 
-This cmdlet sets the storage quota, in megabytes, on a particular geo-location. Additionally, it requires a connection to a multi-geo tenant to run correctly. You must be a SharePoint Online Administrator or Global Administrator.
+This cmdlet sets the storage quota, in megabytes, on a particular geo-location. Additionally, it requires a connection to a multi-geo tenant to run correctly. You must be at least a SharePoint Online Administrator to run the cmdlet.
 
 ## EXAMPLES
 
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/Set-SPOOrgNewsSite.md b/sharepoint/sharepoint-ps/sharepoint-online/Set-SPOOrgNewsSite.md
diff --git a/sharepoint/sharepoint-ps/sharepoint-online/Set-SPOSiteArchiveState.md b/sharepoint/sharepoint-ps/sharepoint-online/Set-SPOSiteArchiveState.md
