OneDrive for Business external sharing links troubleshooting for contractor offboarding: send users to request access
🔍 WiseChecker

OneDrive for Business external sharing links troubleshooting for contractor offboarding: send users to request access

When a contractor leaves your organization, their OneDrive for Business files are often still needed by colleagues or external partners. But after the contractor account is disabled or deleted, anyone who clicks a sharing link to those files sees an access denied error. This article explains why that error occurs and how to configure the files so that new users see a Request Access button instead of a dead end.

The root cause is that sharing links are tied to the owner account. When the contractor account is removed, the link no longer resolves to a valid user. The fix is to transfer file ownership or grant explicit permissions to a new owner before offboarding.

Below you will find step-by-step instructions for IT admins and file owners to enable the Request Access experience, plus related failure patterns and a comparison of sharing link types.

Key Takeaways: Contractor Offboarding and Request Access

  • Microsoft 365 admin center > Users > Active users: Transfer file ownership before deleting the contractor account to keep sharing links working.
  • OneDrive > My files > Share > Manage access: Add the new owner or a group with explicit permissions so external users see Request Access instead of access denied.
  • SharePoint admin center > Sharing > External sharing: Set the tenant-level sharing policy to allow Anyone links or New and existing guests to enable the Request Access flow.

ADVERTISEMENT

Why Sharing Links Break After Contractor Account Removal

Every OneDrive sharing link is bound to the file owner. When that owner account is disabled in Microsoft Entra ID or deleted, the link no longer points to a valid user. The system cannot authenticate the request, so it returns a 403 Forbidden or a generic access denied page.

Even if the file is still physically present in the OneDrive site, the link itself is invalid. External users who click the link see no option to request access because the owner account is gone and no other user has permission to approve requests.

The only way to make those files accessible again is to grant explicit permissions to a new owner or group before the contractor account is removed. After that, external users who lack direct access will see a Request Access button that sends an email to the new owner.

Steps to Enable Request Access for Contractor Files Before Offboarding

These steps assume you are an IT admin or have been granted delegated access to the contractor OneDrive. Perform them while the contractor account is still active.

  1. Sign in to the Microsoft 365 admin center
    Open a browser and go to admin.microsoft.com. Sign in with a Global admin or SharePoint admin account.
  2. Locate the contractor user account
    Go to Users > Active users. Search for the contractor name. Do not delete the account yet.
  3. Transfer OneDrive files to a new owner
    Select the contractor user, then click OneDrive. Under Transfer files, choose a new owner from your organization. Click Transfer. This moves all files to the new owner OneDrive and updates existing sharing links to point to the new owner.
  4. Verify the transfer completed
    Open the new owner OneDrive in a browser. Confirm that the transferred folders and files appear. Check that sharing links from the contractor now redirect to the new owner OneDrive.
  5. Add explicit permissions for external users
    In the new owner OneDrive, select the shared folder or file. Click Share > Manage access. Add the external users or a security group that contains them. Set the permission level to View or Edit as needed. This step ensures that external users who already have the old link can see the file and that others see Request Access.
  6. Configure the external sharing policy for the OneDrive site
    Go to the SharePoint admin center > Active sites. Find the contractor OneDrive site URL. Select it, then click Sharing. Under External sharing, choose Anyone with the link can share or New and existing guests. The Anyone option lets external users request access without signing in. The New and existing guests option requires a Microsoft account or work account. Click Save.
  7. Test the Request Access flow
    Open a private browser window. Paste the original sharing link. You should see a sign-in or request access page. Click Request access. Enter an email address. The new owner should receive an approval email within a few minutes.
  8. Disable or delete the contractor account
    Once the transfer and permissions are confirmed, go back to Users > Active users. Select the contractor account. Click Delete user. This removes the account and prevents future sign-ins.

ADVERTISEMENT

If Request Access Still Does Not Appear After Transfer

External users see access denied with no Request Access button

This usually happens when the external sharing policy for the OneDrive site is set to Only people in your organization. Change the policy to Anyone or New and existing guests in the SharePoint admin center. Also confirm that the file permissions include at least one person or group from outside your tenant.

Request Access email goes to the wrong person

After a file transfer, the new owner is automatically set as the approver for all access requests. If you want a different person to receive requests, add that person as a co-owner of the file or folder. Go to Manage access and add the person with Full control permissions.

Contractor account was already deleted

If the account is gone and you did not transfer files, you have 30 days to restore the user in the Microsoft 365 admin center. Go to Users > Deleted users. Select the contractor and click Restore. Then follow the steps above to transfer files before the 30-day window expires.

Sharing Link Types and Request Access Behavior

Item Anyone link People in your organization link Specific people link
External access without sign-in Yes No No
Shows Request Access after owner removal Yes, if permissions are set to Anyone No, because external users are blocked by policy Yes, if the external user is in the permission list
Best for contractor offboarding Use only if files contain no sensitive data Not recommended for external sharing Use for files that need controlled access
Requires owner account to be active No, link works after transfer No, link works after transfer No, link works after transfer

When a contractor offboarding is planned, use Specific people links for sensitive files and Anyone links for non-sensitive files that must remain accessible to a broad external audience. After the file transfer, both link types will present a Request Access button to users who do not have direct permissions.

After following the steps above, you can offboard contractors without leaving external users stranded with broken links. The Request Access flow ensures that new users can contact the current file owner for permission. For future offboardings, create a standard operating procedure that includes file transfer as the first step before disabling the account. As an advanced tip, use the OneDrive for Business PowerShell module to automate file transfers for bulk contractor offboarding with the Set-SPOUser -IsSiteCollectionAdmin cmdlet and the Request-SPOPersonalSite cmdlet to provision the new owner site.

ADVERTISEMENT