Created by Claude - please verify

Site ownership - group owners from Microsoft Graph, primary owners from Get-PnPTenantSite; secondary site collection admins are not checked.

Required Microsoft Graph permissions

SharePoint: Sites.FullControl.All (application, certificate) Group.Read.All User.Read.All — application permissions, granted to the app registration with admin consent.

Endpoints: Get-PnPTenantSite -Detailed (Owner, GroupId) · GET /v1.0/groups?$filter=groupTypes/any(c:c eq 'Unified')&$expand=owners · GET /v1.0/users

A site whose primary owner is gone may still have working secondary admins - check them before assigning a new owner. 'Only one active owner' is a warning: one leaver away from ownerless.

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Sites Without an Active Owner

Every site needs someone who can answer access requests, review sharing and decide when content can go. Sites whose group has no owner, whose owners have all left, or whose primary owner is disabled or deleted are ungoverned - nobody reviews who has access.