'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
Fix SharePoint External User Access and Resource Errors
Question details
An external guest user cannot access a shared SharePoint site despite being added, while other external users can access the content normally.
- Product
- Microsoft SharePoint
- Device & OS
- not provided
- Scenario
- An external user clicks a sharing link to access SharePoint content but is blocked by an authentication error.
- Observed behavior
- The user receives the error message: 'Sign-in is complete, but we cannot determine what resource you are trying to access.'
Verify that you have site administrator permissions to modify site collection groups, and ensure the external user is signing in with the exact email address used for the invitation.
Use Incognito Mode and a Specific People Link
This resolves conflicts caused by cached browser credentials by using a private session and a direct, targeted sharing link.
Often, external users have multiple Microsoft or organizational accounts logged into their browser, causing token conflicts during sign-in.
Ask the guest user to open a new InPrivate window in Microsoft Edge or an Incognito window in Google Chrome.
In SharePoint, select the content you want to share, click 'Share', change the link settings to 'Specific people', and enter the guest's email address.
Copy the newly generated link, send it to the external user, and have them paste it into the private browser window to sign in.
Remove and Re-add the External User
If browser troubleshooting fails, clearing the user's permission profile from the site directory often fixes underlying access glitches.
Try WPS Office for Seamless Document Collaboration
If complex SharePoint permissions and Microsoft 365 access errors are slowing down your team, WPS Office offers a free, lightweight, and hassle-free alternative. Enjoy real-time document sharing without the headache of site collection configurations.
- 1. Download WPS Office: Install the free WPS Office suite on your device.
- 2. Save to WPS Cloud: Open your document and save it securely to your built-in WPS Cloud storage.
- 3. Share Instantly: Click the 'Share' button in the top right corner to instantly generate a secure collaboration link for external users.
Frequently Asked Questions
Why do I get the error 'cannot determine what resource you are trying to access'?
This error typically occurs when there is a mismatch between the active login token in your browser and the specific account that was granted permissions in the SharePoint site directory. It usually happens if you are logged into multiple Microsoft accounts.
What are HAR logs and how do I get them?
HAR (HTTP Archive) logs are files that record the interaction between a web browser and a website. Microsoft Support uses them to trace exactly where a sign-in request fails. You can generate them using the 'Network' tab in your browser's Developer Tools (F12) while reproducing the error.
Why can other external users access the site without problems?
Permission errors are often isolated to a specific user's browser cache or their individual guest profile within Azure Active Directory. If a profile becomes corrupted or mismatched, only that specific user will experience the access block.
How do I ensure an external user is properly added to SharePoint?
Always use the 'Specific people' sharing option and ensure you type their exact email address. After sharing, you can verify their access by checking the 'Site permissions' > 'Advanced permissions settings' to ensure their account appears in the member directory.
