Has anyone else seen private channel memberships disappear after a user's sign-in is disabled and later enabled again? In testing, the user's normal team memberships eventually returned after several hours, but their private channel memberships did not. This appears to be a documented Microsoft limitation.
The bigger problem is that I couldn't find an audit log entry showing which private channels the user belonged to or which memberships were removed. That makes recovery difficult during security incident remediation, temporary suspensions, or when someone leaves and later rejoins the organization.
A practical workaround may be to keep periodic reports of private channel memberships so they can be used to identify and restore access if this happens. Has anyone found a reliable way to track or recover these memberships?
4 Answers
Private channels behave differently from standard team memberships because they’re backed by separate SharePoint sites and membership relationships. The normal team memberships may eventually rehydrate, but direct private-channel memberships often don’t sync back automatically after an account is disabled and re-enabled.
In this case, “re-enabled” means sign-in was blocked and later unblocked—not that the account was deleted and restored.
A similar issue can appear after an on-premises directory integrated with Entra ID is decommissioned. The user may still appear to belong to the private channels, but removing and re-adding them to the team and channels may be necessary. In one case, the user also had to open the channels’ Shared tab while signed in before the files became visible again.
Yes, we’ve run into this too, and it’s a real pain to clean up. Keeping an exported or scheduled report of private-channel membership seems like one of the safest recovery options.
That’s what I was considering as well. I haven’t found another dependable way to determine every private channel the user previously belonged to.