Specific People Link Opens as Access Denied: OneDrive for Business Fix

When you share a file or folder in OneDrive for Business using the Specific People option, the recipient may see an Access Denied error even though you entered their email address correctly. This problem occurs because the sharing link is tied to a specific user or group permission that has not fully propagated, or because the recipient is signed into the wrong Microsoft account. This article explains the root causes of the Access Denied error on Specific People links and provides the step-by-step fixes to restore access.

Why the Specific People Link Shows Access Denied

The Specific People option in OneDrive creates a sharing link that grants access only to the email addresses you enter. The link itself does not contain the permission; instead, the permission is stored in the file or folder’s access control list on SharePoint Online. When a recipient clicks the link, OneDrive checks their identity against the list. If the recipient’s identity does not match any entry, the system returns Access Denied.

Several technical conditions cause this mismatch:

Recipient Is Signed In With a Different Account

The most frequent cause is that the recipient has multiple Microsoft accounts and is signed into the browser with the wrong one. For example, you shared the file with user@company.com, but the recipient is signed into OneDrive using user@personal.com. OneDrive compares the signed-in identity against the access control list and finds no match, resulting in Access Denied.

External Sharing Is Blocked at the Tenant or Site Level

If the recipient is outside your organization, the OneDrive site or the entire Microsoft 365 tenant must allow external sharing. An admin may have set the sharing policy to Only People in Your Organization or turned off sharing for a specific site. When external sharing is disabled, the Specific People link still generates, but external users receive Access Denied.

Permission Propagation Delay

After you change sharing permissions, SharePoint Online may take up to 15 minutes to propagate the changes across all front-end servers. If the recipient clicks the link immediately after you send it, the permission might not yet be active.

Link Was Created With the Wrong Permission Level

When you create a Specific People link, you can set Can View or Can Edit. If you selected Can View but the recipient needs to edit, the link will still open for viewing. However, if the file has additional restrictions such as expiration date or password protection that were set incorrectly, Access Denied can appear even for view access.

Steps to Resolve Access Denied on a Specific People Link

Follow these steps in order. After each step, ask the recipient to refresh the browser or click the link again.

Step 1: Ask the Recipient to Sign Out and Sign In With the Correct Account

1. Recipient signs out of all Microsoft accounts
   The recipient should open their browser, go to account.microsoft.com, and sign out of every account. Then close all browser windows.
2. Recipient opens a private or incognito window
   In the private window, the recipient navigates to the shared link. OneDrive will prompt for sign-in. The recipient must enter the exact email address you used when creating the Specific People link.

Step 2: Verify the Recipient Email Address in the Sharing Link

1. Open the file or folder in OneDrive
   Go to onedrive.com and locate the shared item.
2. Open the Share dialog
   Select the item and click Share in the toolbar. The dialog shows who has access.
3. Check the Specific People list
   Under Direct Access, look for the recipient’s email. If the email is misspelled or uses a different domain, remove it and add the correct address. Then click Send.

Step 3: Check External Sharing Settings (For External Recipients)

1. Go to the Microsoft 365 admin center
   Sign in as a global admin or SharePoint admin at admin.microsoft.com.
2. Navigate to SharePoint admin center
   In the left menu, select Show all, then Admin centers, then SharePoint.
3. Open Policies > Sharing
   Under External sharing, ensure the level is set to Anyone or New and existing guests. If it is set to Only people in your organization, change it to one of the guest options.
4. Check the specific site
   If the file is in a SharePoint site, go to Active sites, select the site, click Settings, and under Sharing ensure external sharing is enabled.

Step 4: Regenerate the Sharing Link

1. Remove the existing link
   In the Share dialog, click the three dots next to the recipient’s name and select Remove direct access. Click Stop sharing to confirm.
2. Create a new Specific People link
   Click Share again, enter the correct email, set the permission level, and click Send. Provide the new link to the recipient.

Step 5: Wait for Permission Propagation

After changing permissions, wait 15 minutes before asking the recipient to try again. If the issue persists, proceed to the next section.

If OneDrive Still Shows Access Denied After the Main Fix

Specific People Link Works for Some Recipients but Not Others

This usually indicates that the recipient who gets Access Denied is not in your organization’s guest list. Go to Microsoft 365 admin center > Users > Guest users and verify the recipient is listed. If not, add them as a guest user and then reshare the link.

Access Denied When Opening an Office File in the Browser

If the file is an Office document and the recipient sees Access Denied after signing in, the file may be locked by another user. Ask the owner to close the file and wait a few minutes. Also check if the file has an expiration date set. Open the Share dialog, click Link settings, and remove any expiration date or password.

Access Denied on a Folder Shared With Specific People

Folders inherit permissions from the parent site. If the parent site has unique permissions that exclude the recipient, the folder will show Access Denied. Go to the folder, click the three dots, select Manage access, and verify the recipient is listed. If not, add them directly to the folder.

Specific People vs Anyone Link: Key Differences

Item	Specific People Link	Anyone Link
Authentication required	Recipient must sign in with the email you specified	No sign-in required; anyone with the link can access
External sharing control	Requires guest access or external sharing enabled at tenant level	Requires Anyone sharing enabled at tenant level
Security	Access is limited to named individuals	Anyone who obtains the link can access
Common Access Denied cause	Recipient signed in with wrong account or external sharing disabled	Link expired, password required, or sharing policy set to Specific People only

After following these steps, the recipient should be able to open the shared file or folder without receiving Access Denied. If the problem continues, verify that the recipient is using a supported browser and that no browser extensions are blocking OneDrive authentication. As an advanced tip, you can pre-provision guest users in the Microsoft 365 admin center before sharing, which eliminates the permission propagation delay for external recipients.