logo
search
Permission & Access Issues

Fix SharePoint Access Denied for External Guest Users

Guest WriterGuest Writer Sep 30, 2026 869 views

Question details

An external guest user receives an "access denied" error when trying to open a shared SharePoint folder, despite successfully signing into Microsoft Entra ID.

How to Fix SharePoint Access Denied for an External Guest User
Product
Microsoft SharePoint
Device & OS
not provided
Scenario
Accessing a shared SharePoint folder as an external guest user.
Observed behavior
The user receives an access-denied message due to incorrect cached guest identity information or the original invitation being accepted by a different account.
Before you start

Ensure you have administrative privileges in Microsoft Entra ID and the SharePoint site to manage guest identities and directory permissions.

Solution 1Recommended

Reset Guest Identity and Re-invite User

Remove the incorrect guest account from your directory and SharePoint site, clear cached data, and send a fresh invitation to resolve access conflicts.

This error generally happens when a guest user accepts a sharing invitation using an email address or account different from the one originally intended. Clearing the conflicting identity from all levels of the system is required before re-sharing the folder.

1
Remove incorrect identity

Determine which account incorrectly accepted the invitation. Remove this incorrect account from the guest users list, the specific SharePoint site, and Microsoft Entra ID.

2
Clear browser caches

Clear the browser cache and cookies on both the sharing user's and the external guest user's devices to eliminate conflicting login tokens.

3
Re-invite using full email

Invite the user again with a different display name. Use the advanced sharing page and type the guest's full email address. If two results appear in the dropdown menu, select the full email address instead of the cached display name.

4
Access via incognito mode

Copy the shared file or folder path from the address bar. Instruct the guest user to open an incognito or private browser session and paste the link to access the folder.

Reset Guest Identity and Re-invite User
Email Address Selection: Always select the full email address manually from the sharing dropdown rather than relying on a cached display name, ensuring the correct identity receives the permissions.
Free Microsoft Office alternative

Looking for simpler document collaboration? Try WPS Office

While managing enterprise permissions in Microsoft SharePoint can be complex, everyday document sharing and editing shouldn't be. WPS Office is a highly compatible, free, and lightweight alternative to Microsoft Office, offering intuitive tools for your daily tasks.

  1. 1. Download the installer: Visit the official WPS Office website and download the free installer for your operating system.
  2. 2. Install the software: Run the setup file and follow the on-screen instructions to complete the installation.
  3. 3. Open and edit documents: Launch WPS Office and instantly open your existing Microsoft Office files without losing any formatting.
Free and lightweight office suite for Windows, Mac, and LinuxFully compatible with Microsoft Word, Excel, and PowerPoint formatsEasy file sharing and built-in document collaboration toolsFamiliar, easy-to-use tabbed interface for seamless migration
microsoft office alternative - wps office

Frequently Asked Questions

Why does an external user get an access denied error in SharePoint?

This typically occurs if the external invitation was accepted using a different email account than intended, or if the user's web browser has cached an incorrect guest identity token.

How do I completely remove a guest user from SharePoint?

To completely remove a guest, you must delete their account from the SharePoint site permissions list, the site collection, and completely remove their identity from the Microsoft Entra ID directory.

Can clearing the browser cache fix SharePoint permission issues?

Yes. Clearing the browser cache removes stored login credentials and identity tokens that frequently cause access conflicts when attempting to open shared SharePoint folders.