OneDrive Admin Checklist: external sharing links send users to request access for external guests

When you share a OneDrive file or folder with an external guest, the recipient sometimes sees a Request Access page instead of the file. This interruption breaks collaboration and confuses users. The root cause is typically a mismatch between the sharing link type, the guest’s authentication state, or a tenant-level sharing restriction. This article explains why this behavior occurs and provides a step-by-step checklist for Microsoft 365 administrators to resolve it.

Why External Guests See Request Access Instead of the Shared File

When an external guest clicks a OneDrive sharing link, OneDrive checks several conditions before displaying the file. If any condition is not met, OneDrive redirects the guest to a Request Access page. The guest must then send a request to the file owner, who must manually approve it. This extra step defeats the purpose of sharing.

The most common causes are:

• Link type is set to People in your organization. Only users inside your tenant can access the file. External guests are blocked immediately.
• Link type is set to People with existing access. The guest has no direct access because the link does not grant it. The guest must already have explicit permissions.
• Guest user account is missing or disabled. The guest was never added as a guest in Azure AD, or the guest account was deleted. OneDrive cannot authenticate the user.
• External sharing is turned off at the tenant level. The admin has disabled external sharing for OneDrive or SharePoint. All external links redirect to Request Access.
• Domain allowlist or blocklist is misconfigured. The guest’s email domain is blocked, or the domain is not on the allowlist. OneDrive treats the domain as untrusted.
• Conditional Access policies block external users. Azure AD requires multi-factor authentication or device compliance, but the guest cannot satisfy those requirements.

Understanding these root causes helps you diagnose the exact issue. The checklist below covers each configuration point.

Step-by-Step Admin Checklist to Resolve External Guest Request Access

Follow these steps in order. After each step, test the sharing link with a guest account that is not part of your tenant.

1. Check the tenant-level external sharing setting
   Go to Microsoft 365 admin center > Settings > Org settings > Sharing. Under External sharing, verify that OneDrive and SharePoint are set to Allow sharing with authenticated external users or Anyone. If set to Only people in your organization, change it. Click Save.
2. Verify the OneDrive external sharing policy
   Open the OneDrive admin center at admin.microsoft.com/AdminPortal/Home#/sharepoint. Select Policies > Sharing. Under External sharing for OneDrive, choose Allow sharing with authenticated external users. Ensure the checkbox Limit external sharing by domain is configured correctly. If you use a domain allowlist, add the guest’s domain. Click Save.
3. Set the default sharing link type
   In the same Sharing page, scroll to Default link type. Select Specific people. This forces new shares to create links that require authentication. If you select Anyone, guests without a Microsoft account will still see a sign-in prompt. Click Save.
4. Check guest access in Azure AD
   Go to Azure AD > External Identities > External collaboration settings. Under Guest user access, verify that Guest users have the same access as members or Guest users have limited access. For OneDrive sharing, limited access is usually sufficient. Under Guest invite settings, ensure Anyone in the organization can invite guest users is selected. Click Save.
5. Confirm the guest user exists in Azure AD
   Open Azure AD > Users > All users. Search for the guest email. If the guest does not appear, add them manually: select New guest user, enter the email, and send the invitation. The guest must accept the invitation before accessing the shared file.
6. Validate the guest user account status
   In Azure AD, select the guest user. Under Properties, check that Block sign-in is set to No. Under Profile, verify the email is correct. If the guest was previously deleted, restore the user or create a new invitation.
7. Review Conditional Access policies
   Go to Azure AD > Security > Conditional Access. Review policies that target All external users or Guest users. If a policy requires multi-factor authentication or a compliant device, the guest may be blocked. Add an exclusion for OneDrive or create a separate policy for external users that only requires a Microsoft account. Click Save.
8. Test with a fresh sharing link
   Share the file again using the OneDrive web interface. Select the file, choose Share, then Specific people. Enter the guest email. Set permissions to View or Edit as needed. Send the link. The guest should now see the file directly without a Request Access prompt.

Common Issues After Changing Sharing Settings

Guests still see Request Access even after all settings are correct

This usually means the guest account was never fully provisioned. Open Azure AD, confirm the guest accepted the invitation. If the invitation was sent but not accepted, resend it. Also verify that the guest is using the same email address that received the invite. If the guest forwards the link to a different email address, they will see Request Access.

OneDrive link works but SharePoint link does not

SharePoint site-level sharing settings can override tenant-level settings. Go to the SharePoint admin center > Active sites. Select the site, then Settings > Site sharing. Ensure external sharing is set to New and existing guests or Anyone. If the site is set to Only existing guests, new external users cannot access it. Adjust the setting and click Save.

Guest can access the file but cannot edit

The sharing link may have been created with View permission. Re-share the file with Edit permission. If the file is in a folder, check the folder permissions. OneDrive folder permissions apply to all files inside. Also verify that the file is not owned by a user who has left the organization. Orphaned files may require an admin to transfer ownership.

External sharing is enabled but the link still shows Request Access for some guests

The guest may be trying to access the file from a browser that does not support modern authentication. OneDrive requires modern authentication for external guests. Ask the guest to use the latest version of Edge, Chrome, or Firefox. Also ensure that the guest is not using a private browsing mode that blocks third-party cookies. OneDrive uses cookies to maintain the authentication session.

OneDrive External Sharing Link Behaviors: Comparison Table

Item	Anyone link	Specific people link (authenticated)
Description	Anyone with the link can access the file without signing in	Only specified users can access after signing in with a Microsoft account or work account
Guest authentication required	No	Yes
Guest must be added to Azure AD	No	Yes
Common cause of Request Access	Rare — link type itself does not block guests	If guest is not in Azure AD or domain is blocked
Security level	Lowest — anyone with the link can access	Higher — only invited guests can access
Best for	Public documents, non-confidential content	Confidential files, collaboration with known partners

After completing the checklist, you can now ensure that external guests receive direct access to shared OneDrive files instead of a Request Access page. Test with a guest account from a different organization to confirm the fix. As an advanced tip, use Microsoft 365 audit logs to track sharing link creation and guest access attempts. This helps you identify blocked guests before they report the issue.