Forum Discussion
External Microsoft 365 Work Accounts Unable to Access Shared Resources
Hello,
We migrated company folders and files from Dropbox Business to a SharePoint Online document library using the Migration Manager tool in Microsoft 365 Admin Center. No issues with the tool.
Once the folders and file were migrated, we noticed that we were unable to perform simple sharing of folders and files to external users (both non-Microsoft and Microsoft 365). While the share steps were normal and the external recipients received the share notification emails, when they clicked on them, performed the OTP, they were presented with Your account doesn't have access to these resources.
Share settings are wide open for any user to share externally at the SharePoint Online admin center and Site level.
Performed several share tests with different external account types and unable to access the share. We then created a new document library and tested sharing and had no issues with different external account types. Opened a case with Microsoft Support and they stated that it may be a known issue with the Migration Manager tool specifically when migrating from Dropbox. Their solution was to move the folders and files to a new library.
We created a new document library and tested external sharing. No issues. Then moved the folders and files using the GUI to the new library.
As we started to share folders and files externally, external users started reporting some can access while others cannot. After more testing we discovered that we can share externally to non-Microsoft 365 work accounts (Gmail, Outlook.com, etc.) with no issues. When sharing specifically to external Microsoft 365 work accounts, they cannot access the shared resources when they receive the share notification email. There is no problem creating the share. We are just clicking on the share icon, adjusting the share settings as needed, enter the external addresses, and send the share. The external recipients receive the email notification without issue, click on the link, perform the OTP, and then receive the message Your account does not have access to these resources.
We have another Microsoft Support case open, but if anyone has any insights much would be appreciated.
Also, note that when sharing from any user's OneDrive, no issue at all. All external account types can access the shares without issue.
Thanks!
1 Reply
First, go to admin.microsoft.com/sharepoint and turn on the external sharing switch, select Allow specific external domains to access, then run Set-SPOSite -Identity <site URL> -SharingCapability ExternalUserSharingOnly on the target site. command on the target site, and finally remember to set guest privileges on the external account in Azure AD.
