Re-enabling a disabled account can remove private Teams channel memberships
Asked by
MellowCedar42
I ran into a concerning Microsoft Teams behavior after disabling and then re-enabling a user account. The account's sign-in was blocked temporarily and later enabled again. The user's regular team memberships eventually returned after several hours, but their private channel memberships were missing.
Microsoft documents this as a known limitation. I also tested it in a lab and couldn't find an audit log entry showing which private channels the user previously belonged to or which memberships had been removed. That makes it difficult to determine what access needs to be restored after the fact.
This could matter during security incident response, temporary account suspensions, or when someone leaves and later rejoins an organization. One possible precaution would be to keep periodic reports of private channel memberships so they can be referenced if access disappears.
Has anyone else experienced this after blocking and unblocking a user's sign-in, and how did you restore or track the missing memberships?
Answers
Private channels behave differently from standard team membership because they’re backed by separate SharePoint sites and access objects. Disabling an account can remove the user’s direct channel membership, but re-enabling the account usually doesn’t rebuild those relationships automatically.
Reply to this answer
A similar issue can occur when an on-premises Active Directory environment using directory synchronization is decommissioned. The user may still appear to be listed in private channels, but removing and re-adding them to the team and channels may be necessary. In one case, the user also had to open the channels’ Shared tab while signed in before the files became visible again.
Reply to this answer
In this case, “re-enabled” means that sign-in was disabled and then enabled again—not that the account was deleted and restored.
Reply to this answer
Yes, we’ve seen it too. It’s an especially frustrating cleanup task because the normal team memberships may come back while the private channel access does not.
Reply to this answer
Add your answer
Answers are reviewed before publication.
MellowCedar42: That’s what I’m concerned about. I haven’t found a reliable way to discover the old memberships afterward, so keeping an inventory or scheduled report seems like the safest approach.