“Access denied” when opening a SharePoint Online site

Steve Roger 0 Reputation points
2026-09-26T00:40:29.9133333+00:00

I receive an “Access Denied” message when opening a SharePoint Online site. I am a member of the appropriate Microsoft 365 group, and other members can access the site successfully.

Are there anything I can do?

Microsoft 365 and Office | SharePoint | For business | Windows
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Darren Bruce 1,745 Reputation points Independent Advisor
    2026-09-26T01:14:55.93+00:00

    Dear Steve Roger,

    If you are receiving an "Access Denied" message when opening a SharePoint Online site, even though you are a member of the appropriate Microsoft 365 group.

    For better understanding your situation, please provide some more information as:

    • Whether the problem affects the entire site or only specific libraries, folders, or files.
    • Whether the site owner can see your account listed in the site's permissions.

    In the meantime, you can try the following troubleshooting steps:

    1/Confirm you are using the correct SharePoint site URL.

    • Verify that the site address has not changed and that you are opening the intended site.

    2/Verify your group membership.

    • Ask the site owner or administrator to confirm that your account is a member of the connected Microsoft 365 group or SharePoint group that grants access to the site.

    3/Use the "Check Permissions" feature.

    • A SharePoint administrator can use Site Permissions > Check Permissions to verify the permissions that your account is actually receiving.

    4/Check for unique permissions.

    • The site, document library, folder, or individual file may have broken inheritance and unique permissions that exclude your account, even if you belong to the correct group.
    • If only a specific folder or file is inaccessible, focus on permissions at that level rather than changing site-wide permissions.

    5/Test in an InPrivate/Incognito browser window.

    • This helps eliminate issues caused by cached credentials, cookies, or conflicting sign-in sessions.

    6/Allow time for permission propagation.

    • If you were recently granted access, directory and permission changes may require some time to take effect before access is available.

    7/Re-add the user only when necessary.

    • Removing and re-adding the user should be considered only after confirming that the existing permission assignment is incorrect or not being applied properly

    I hope information above can help you resolve the issue, please feel free to reach out if you have any other questions.

    If the answer is helpful, please click "Yes". If you have extra questions about this answer, please click "Comment".   

    Note: Please follow the steps in the forum documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    Was this answer helpful?

  2. AI answer

    2026-09-26T00:40:44.64+00:00

    Yes. If membership in the Microsoft 365 group looks correct but the site still shows Access Denied, the supported checks are:

    1. Verify the user’s effective permissions on the site
      • In the SharePoint site, go to Settings > Site permissions.
      • In the ribbon, select Check Permissions.
      • Enter the affected user in User/Group, then select Check Now.
      • Review both the direct permissions and any related security group permissions.
    2. Confirm the expected permission level
      • Determine what permission level the user should have on the site.
      • If the user does not actually have the required permissions, grant access to the site or file.
    3. Remove and re-grant access if permissions appear correct but access still fails
      • Remove the user from the site.
      • Grant the user permissions again to the site or file.
    4. Run the Microsoft 365 “Check User Access” diagnostic
      • Microsoft 365 administrators can run this diagnostic in the tenant to identify issues affecting SharePoint and OneDrive access.
      • This diagnostic is not available in GCC High, DoD, or Microsoft 365 operated by 21Vianet.
    5. Check for known causes when group membership alone is not enough
      • Permissions may not be configured correctly for the affected user.
      • A site user ID mismatch can cause this, especially if the account was deleted and recreated with the same UPN.
      • If the site was opened from a shared link, the signed-in account might be different from the account that received the invitation.

    If the error is specifically “You need permission to access this site” or “User not found in the directory,” the same causes and checks apply.

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.