Security Compliance

SharePoint Online scan in ARM shows only the root site

This article explains how to resolve the issue where only the root site is visible during a SharePoint Online scan in ARM.

First published date

10/10/2025 10:57 AM

Last published date

10/10/2025 10:57 AM

Overview

When configuring a SharePoint Online scan in ARM (Configuration > Scans > SharePoint Online scan), you may see only the root site of your tenant, while all subsites are missing. In the scan section, the option "The following SharePoint elements will be scanned" URL appears as:  https://tenant.sharepoint.com

Product section

Access Rights Manager

Cause

The issue occurs when the scan is configured with the standard root site URL instead of the admin site URL. ARM needs the -admin suffix in the URL to retrieve the full site hierarchy. It is also explained in the following document: Add a SharePoint Online resource

Resolution

  1. In ARM, go to Configuration > Scans > SharePoint Online scan
  2. Remove the existing SharePoint Online scan (if already configured)
  3. Add a new scan using the credentials with the required access permissions
  4. In the "SharePoint Online selection", use the admin URL format. Example: https://tenant-admin.sharepoint.com
    •  
  5. Save the configuration and run the scan.