Permission & Access Issues

Fix SharePoint Access Denied Despite Read Permissions

Adam Davis Oct 15, 2026 868 views

Question details

Users need to resolve an issue where visitors encounter an Access Denied error on a SharePoint site, despite the 'Everyone except external users' group being granted Read permissions in the site's Visitors group.

How to Fix SharePoint Access Denied Despite Read Permissions

Product: SharePoint Online
Device & OS: not provided
Scenario: Internal users who only have Read access are blocked from viewing a SharePoint site, while users with Edit or Owner rights can access it normally.
Observed behavior: The SharePoint site displays an Access Denied message to users in the Visitors group, indicating that their Read access is not successfully applying to the subpages they are attempting to load.

Before you start

Verify that you have Site Owner or Full Control permissions on the SharePoint site before attempting to review or modify page-level permission inheritance.

Solution 1Recommended

Grant View Permissions Explicitly on Subpages

Use this solution when subpages have broken inheritance, preventing site-level Read permissions from trickling down to the actual content.

SharePoint sites often contain subpages that do not automatically inherit permissions from the parent site. When inheritance is broken, granting access at the top site level won't apply to those specific subpages, resulting in targeted Access Denied errors for standard visitors.

Open Site Pages

Click the SharePoint gear icon in the top right, navigate to Site Contents, and then select the Site Pages library.

Manage Page Access

Hover over the problematic subpage, click the three vertical dots (Show actions) next to the page name, and select Manage Access.

Add the Group

Click the plus icon (+) or 'Grant Access' and type 'Everyone except external users' in the recipient field.

Assign View Rights

Set the permission level drop-down to 'Can view' or 'Read', and click Grant Access to restore visibility.

Grant View Permissions Explicitly on Subpages

Alternative: Restore Inheritance: Instead of adding explicit permissions manually, you can open Advanced Settings for the specific page and click 'Delete unique permissions'. This will forcefully restore standard site-wide inheritance.

Solution 2

Create and Assign a Custom Read Permission Level

If the default Visitors group configuration is malfunctioning, creating a fresh read-only permission level and directly sharing the site can bypass the restriction.

Free Microsoft Office alternative

Simplify Document Sharing with WPS Office

SharePoint permission structures can be overly complex and prone to inheritance errors. If you need a straightforward, lightweight way to create, edit, and collaborate on documents without wrestling with access denied errors, WPS Office is an excellent free alternative.

1. Download WPS Office: Install the free WPS Office suite on your preferred Windows, Mac, or mobile device.
2. Create or Open a Document: Launch the application and open your existing Microsoft Office files with perfect formatting retention.
3. Share via Link: Click the Share button in the top right corner to generate a simple read-only or edit link, entirely bypassing complex server permission setups.

Seamless compatibility with Microsoft Office formats (Word, Excel, PowerPoint)Free, lightweight, and incredibly easy to deploy across your organizationSimplified cloud document sharing with hassle-free link-based access controlFamiliar user interface that requires no additional training

microsoft office alternative - wps office

Frequently Asked Questions

Why does SharePoint say access denied when I have permissions?

This typically occurs because the specific page, list, or document library you are trying to view has unique permissions configured. This breaks the inheritance from the parent site where your Read permissions were originally granted.

How do I check if a user actually has access to a specific SharePoint page?

Navigate to Site Contents > Site Pages, select the specific page, and open its Advanced Permissions Settings. Click 'Check Permissions' in the top ribbon and enter the user's name to verify their exact access level for that specific asset.

What does the 'Everyone except external users' group include?

It is a default Microsoft 365 security group that automatically encompasses all internal members of your organization's tenant. It explicitly excludes guest users or external collaborators from having access.

How can I fix broken permission inheritance on a subpage?

Navigate to the Advanced Permissions Settings for the specific subpage and click 'Delete unique permissions' in the top ribbon. This action deletes custom rules and forces the page to inherit the parent site's visitor groups.

Document & File Issues