Fix SharePoint Access Denied for a Rehired User
Question details
A rehired employee is unable to access shared SharePoint files and gets trapped in an access request loop.
- Product
- Microsoft SharePoint
- Device & OS
- not provided
- Scenario
- A former employee is rehired and their Microsoft 365 account is either restored or recreated, causing permission conflicts with old SharePoint sharing links.
- Observed behavior
- The user experiences an "Access Denied" error or a continuous "Request access" loop because old links point to a stale account identity or an incorrect onmicrosoft.com alias.
Ensure you have Microsoft 365 administrator privileges, as resolving account identity conflicts requires access to the Microsoft 365 admin center.
Verify and Update the Restored Account Identity
Ensure the rehired user's restored account uses the correct primary email address and company domain instead of a default routing alias.
When an account is restored, sharing links from personal SharePoint sites might mistakenly default to the user's hidden onmicrosoft.com account rather than their normal company email address.
Log in to the Microsoft 365 admin center as an administrator and navigate to Users > Active users.
Locate and click on the rehired employee's account to open the account properties panel.
Check the primary email address. Ensure it matches the correct company domain and is not set to an onmicrosoft.com address.
If the domain or primary email is incorrect, update it to the proper company address and save your changes.
Reset File Permissions via Manage Access
Clear out old, broken permission links and manually reassign access to the newly restored account.
Test Access in a Private Browser Window
Bypass browser cache and outdated session tokens that might be attempting to authenticate the old identity.
Try WPS Office for Simpler Document Collaboration
If complex Microsoft 365 administrator settings and permission loops are slowing down your team, WPS Office offers a streamlined alternative. It provides powerful document creation and collaboration tools without the heavy backend management.
- 1. Download the App: Visit the official WPS website to download the free office suite for your device.
- 2. Open Your Documents: Open your existing .docx, .xlsx, and .pptx files directly in WPS Office with zero formatting loss.
- 3. Share with Ease: Use built-in cloud sharing to generate a simple link and collaborate with your team instantly.
Frequently Asked Questions
Why does a rehired employee get a SharePoint access request loop?
This typically occurs because old SharePoint sharing links still point to the user's previous account identifier or a default onmicrosoft.com alias, rather than their newly restored primary email identity.
Should we recreate or restore the account for a rehired employee?
If the rehire happens within the 30-day deletion window, restoring the account is generally preferred to retain previous data. However, administrators must ensure the primary email address and domain are updated correctly after restoration.
How can I force SharePoint to recognize the rehired user's new permissions?
An admin or the file owner should navigate to the 'Manage access' settings for the affected file, completely remove the user's old permissions, and then freshly reassign access to their current active account.
What should I do if the SharePoint access issue persists after updating permissions?
If removing and reassigning permissions does not work, an administrator should open a formal support request through the Microsoft 365 admin center to resolve backend identity syncing issues.
