SOLVED
Home

External user permission error

%3CLINGO-SUB%20id%3D%22lingo-sub-60979%22%20slang%3D%22en-US%22%3EExternal%20user%20permission%20error%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-60979%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20have%20a%20sharepoint%20online%20tenant%2C%20In%20which%20one%20sitecollection%20is%20shared%20externally%20to%20certain%20domains.%20For%20most%20of%20the%20domains%20and%20users%20it%20is%20working%20fine%20when%20we%20share%20the%20external%20user%20contribute%20permission.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBut%20for%20one%20domain%20which%20has%20one%20active%20user%20when%20the%20sub%20site%20is%20shared%20as%20contribute%20or%20even%20owner%20it%20shows%20shared%20but%20with%20a%20lot%20of%20Deny%20access.%20But%20for%20other%20external%20user%20it%20is%20just%20showing%20the%20contribute%20access%20allowed%20and%20not%20the%20deny.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENow%20the%20user%20can%20see%20the%20landing%20page%20(%20one%20list%20view%20web%20part%20%2C%20document%20library%20%2C%20contact%20web%20part)%3C%2FP%3E%3CP%3EBut%20when%20it%20click%20the%20list%20and%20tries%20to%20go%20to%20the%20list%20page%20the%20url%20keeps%20redirecting%20and%20to%20login.microsoft%20and%20then%20back%20to%20the%20list%20endlessly.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20already%20deleted%20the%20user%20once%20then%20re%20added%20it%20but%20to%20no%20use%2C%20Elevated%20to%20owner%20permission%20still%20no%20use.%20Any%20suggestions%20would%20be%20helpful%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20785px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F13041i322E6F1D1BDD82DD%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22SigmaError.png%22%20title%3D%22SigmaError.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-60979%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ESharePoint%20Online%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-314710%22%20slang%3D%22en-US%22%3ERe%3A%20External%20user%20permission%20error%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-314710%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20All%2C%20I%20am%20also%20facing%20the%20similar%20issue%20-%20When%20given%20the%20READ%20only%20access%20to%20a%20external%20user.%20I%20am%26nbsp%3Bseeing%20the%20permissions%20are%20as%20attached.%20User%20is%20not%20able%20to%20access%20the%20site.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMay%20i%20know%20why%20i%20am%20seeing%20the%20Deny%20permissions%3F%20How%20can%20i%20remove%20this%20Deny%20permission.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20%26amp%3B%20Regards%2C%3C%2FP%3E%3CP%3EBhanu%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-171968%22%20slang%3D%22en-US%22%3ERe%3A%20External%20user%20permission%20error%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-171968%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Kanwar%20-%20can%20you%20please%20share%20in%20detail%20what%20you%20had%20to%20do%20to%20remove%20the%20DENY%3F%20I%20have%20checked%20my%20external%20user%20too%20and%20they%20are%20marked%20as%20a%20user%20role%20within%20Azure%20AD.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-157077%22%20slang%3D%22en-US%22%3ERe%3A%20External%20user%20permission%20error%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-157077%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20solution%20for%20this%20issue%20is%20to%20add%20your%20own%20domain%20to%20the%20list%20of%20allowed%20domains(tenantname.onmicrosoft.com)%20on%20the%20Tenant%20and%20to%20the%20site%20collection%20that%20is%20being%20shared%20externally.%20In%20my%20testing%2C%26nbsp%3Bin%20some%20cases%20by%20just%20populating%20external%20user's%20work%26nbsp%3Bemail%20address%20in%20the%20user's%20profile%20did%20work%26nbsp%3Band%20in%20some%20cases%2C%26nbsp%3BI%20had%20to%20add%20our%20own%20domain%20to%20allowed%20list.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EPlease%20let%20me%20know%20if%20this%20solution%20worked%20for%20you.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-64628%22%20slang%3D%22en-US%22%3ERe%3A%20External%20user%20permission%20error%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-64628%22%20slang%3D%22en-US%22%3E%3CP%3EIt%20was%20problem%20with%20the%20user%20role%20in%20azure%20AD%20%2C%20changed%20that%20to%20User%20which%20fixed%20the%20issue.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-61309%22%20slang%3D%22en-US%22%3ERe%3A%20External%20user%20permission%20error%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-61309%22%20slang%3D%22en-US%22%3EWell%2C%20the%20problem%20is%20clear%3A%20the%20user%20has%20not%20permissions%20to%20view%20items%20so%20that's%20the%20reason%20why%20he%2Fshe%20is%20having%20denied%20access%20when%20trying%20to%20browse%20a%20list.%20Apparently%20he%2Fshe%20has%20been%20assigned%20at%20some%20point%20of%20your%20information%20architecture%20this%20permission%20so%20you%20have%20to%20find%20where%20and%20do%20the%20right%20permission%20assignment%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-61299%22%20slang%3D%22en-US%22%3ERe%3A%20External%20user%20permission%20error%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-61299%22%20slang%3D%22en-US%22%3E%3CP%3EI%20can%20see%20the%20permission%20Read%20%2C%20contribute%20and%20list%20of%20deny%20permissions.%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20785px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F13088iB310115AE9F99A42%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22SigmaError.png%22%20title%3D%22SigmaError.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-60988%22%20slang%3D%22en-US%22%3ERe%3A%20External%20user%20permission%20error%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-60988%22%20slang%3D%22en-US%22%3EWhat%20information%20do%20you%20get%20when%20checking%20the%20permissions%20of%20the%20user%20by%20using%20the%20Check%20permissions%20option%20available%20in%20the%20Permissions%20page%20in%20the%20site%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-60982%22%20slang%3D%22en-US%22%3ERe%3A%20External%20user%20permission%20error%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-60982%22%20slang%3D%22en-US%22%3E%3CP%3EAdmins%20can%20you%20please%20help%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E
Kanwar Jot Singh
Contributor

We have a sharepoint online tenant, In which one sitecollection is shared externally to certain domains. For most of the domains and users it is working fine when we share the external user contribute permission.

 

But for one domain which has one active user when the sub site is shared as contribute or even owner it shows shared but with a lot of Deny access. But for other external user it is just showing the contribute access allowed and not the deny. 

 

Now the user can see the landing page ( one list view web part , document library , contact web part)

But when it click the list and tries to go to the list page the url keeps redirecting and to login.microsoft and then back to the list endlessly.

 

I already deleted the user once then re added it but to no use, Elevated to owner permission still no use. Any suggestions would be helpful 

SigmaError.png

 

 

Thanks

8 Replies

Admins can you please help 

 

Thanks

What information do you get when checking the permissions of the user by using the Check permissions option available in the Permissions page in the site?

I can see the permission Read , contribute and list of deny permissions.

SigmaError.png

 

Well, the problem is clear: the user has not permissions to view items so that's the reason why he/she is having denied access when trying to browse a list. Apparently he/she has been assigned at some point of your information architecture this permission so you have to find where and do the right permission assignment
Solution

It was problem with the user role in azure AD , changed that to User which fixed the issue.

Highlighted

The solution for this issue is to add your own domain to the list of allowed domains(tenantname.onmicrosoft.com) on the Tenant and to the site collection that is being shared externally. In my testing, in some cases by just populating external user's work email address in the user's profile did work and in some cases, I had to add our own domain to allowed list.

 

Please let me know if this solution worked for you.

Hi Kanwar - can you please share in detail what you had to do to remove the DENY? I have checked my external user too and they are marked as a user role within Azure AD. 

Hello All, I am also facing the similar issue - When given the READ only access to a external user. I am seeing the permissions are as attached. User is not able to access the site.

 

May i know why i am seeing the Deny permissions? How can i remove this Deny permission.

 

Thanks & Regards,

Bhanu

 

Related Conversations