Fix SharePoint Access Denied for External Guest Users
Question details
An external guest user receives an "access denied" error when trying to open a shared SharePoint folder, despite successfully signing into Microsoft Entra ID.

- Product
- Microsoft SharePoint
- Device & OS
- not provided
- Scenario
- Accessing a shared SharePoint folder as an external guest user.
- Observed behavior
- The user receives an access-denied message due to incorrect cached guest identity information or the original invitation being accepted by a different account.
Ensure you have administrative privileges in Microsoft Entra ID and the SharePoint site to manage guest identities and directory permissions.
Reset Guest Identity and Re-invite User
Remove the incorrect guest account from your directory and SharePoint site, clear cached data, and send a fresh invitation to resolve access conflicts.
This error generally happens when a guest user accepts a sharing invitation using an email address or account different from the one originally intended. Clearing the conflicting identity from all levels of the system is required before re-sharing the folder.
Determine which account incorrectly accepted the invitation. Remove this incorrect account from the guest users list, the specific SharePoint site, and Microsoft Entra ID.
Clear the browser cache and cookies on both the sharing user's and the external guest user's devices to eliminate conflicting login tokens.
Invite the user again with a different display name. Use the advanced sharing page and type the guest's full email address. If two results appear in the dropdown menu, select the full email address instead of the cached display name.
Copy the shared file or folder path from the address bar. Instruct the guest user to open an incognito or private browser session and paste the link to access the folder.

Looking for simpler document collaboration? Try WPS Office
While managing enterprise permissions in Microsoft SharePoint can be complex, everyday document sharing and editing shouldn't be. WPS Office is a highly compatible, free, and lightweight alternative to Microsoft Office, offering intuitive tools for your daily tasks.
- 1. Download the installer: Visit the official WPS Office website and download the free installer for your operating system.
- 2. Install the software: Run the setup file and follow the on-screen instructions to complete the installation.
- 3. Open and edit documents: Launch WPS Office and instantly open your existing Microsoft Office files without losing any formatting.

Frequently Asked Questions
Why does an external user get an access denied error in SharePoint?
This typically occurs if the external invitation was accepted using a different email account than intended, or if the user's web browser has cached an incorrect guest identity token.
How do I completely remove a guest user from SharePoint?
To completely remove a guest, you must delete their account from the SharePoint site permissions list, the site collection, and completely remove their identity from the Microsoft Entra ID directory.
Can clearing the browser cache fix SharePoint permission issues?
Yes. Clearing the browser cache removes stored login credentials and identity tokens that frequently cause access conflicts when attempting to open shared SharePoint folders.




