OneDrive Admin Checklist: external sharing links send users to request access for contractor offboarding

When you offboard a contractor and remove their Microsoft 365 account, external sharing links that were shared with that contractor may start sending new recipients to a request-access page instead of opening the file. This happens because the sharing link was issued to a specific user who no longer exists in your tenant. As an admin, you need a systematic checklist to audit, recreate, or reassign those links so business partners and vendors can access files without interruption. This article explains why the request-access behavior occurs and provides a step-by-step admin checklist to resolve it.

Why External Sharing Links Send Users to Request Access After Contractor Offboarding

When you delete a contractor’s Microsoft 365 account, their OneDrive site and all permissions tied directly to that user are also removed. External sharing links that were created with the option “Specific people” or “People in your organization” rely on the recipient’s identity being present in Azure Active Directory. Once the contractor account is deleted, Azure AD no longer recognizes that user, so any link that was specifically shared with them becomes invalid.

The request-access page appears because OneDrive and SharePoint fall back to the default permission behavior: when a link points to a file but the intended recipient cannot be validated, the system prompts the new user to request access. This is not a bug — it is the expected security behavior. The link itself still exists, but the permission grant is orphaned because the target user no longer exists.

Link Types Affected by Account Deletion

Not all external sharing links break. The following link types are affected:

• “Specific people” links: These links are tied to the email address of the recipient. If that email belongs to a deleted user, the link becomes orphaned.
• “People in your organization” links: These links require a valid Azure AD account. A deleted contractor account cannot authenticate, so new recipients see the request-access page.

Link types that remain functional include “Anyone with the link” (no sign-in required) and “People with existing access” (permissions inherited from the folder or site).

Checklist to Fix External Sharing Links After Contractor Offboarding

Use this checklist in the order shown. Each step addresses a specific layer of the issue — from restoring the user to recreating links.

1. Restore the deleted contractor account
   Go to the Microsoft 365 admin center at admin.microsoft.com. Select Users > Deleted users. Find the contractor account, select it, and click Restore. The account is restored within 30 days of deletion. After restoration, the contractor’s OneDrive files and shared links become accessible again. Do not assign a license unless you need to access the OneDrive site directly.
2. Access the contractor’s OneDrive site
   In the Microsoft 365 admin center, go to Users > Active users. Select the restored contractor account. Under the OneDrive tab, click Create link to files. This opens the OneDrive site in a new browser tab. You can now browse files and folders that were shared externally.
3. Identify files and folders with broken external links
   In the contractor’s OneDrive site, look for any folder or file that has the sharing icon (a person with a plus sign) in the status column. Hover over the icon to see the list of shared links. Make note of each file or folder that uses a “Specific people” or “People in your organization” link.
4. Recreate external sharing links with “Anyone with the link”
   For each file or folder identified in step 3, select the item and click Share. In the sharing dialog, change the link type to Anyone with the link. Set an expiration date if your organization policy requires it. Click Apply and then Send or Copy link. Distribute the new link to the intended external recipients.
5. Verify external sharing settings in the SharePoint admin center
   Go to the SharePoint admin center at admin.microsoft.com/sharepoint. Select Policies > Sharing. Under External sharing, ensure that the setting for OneDrive allows sharing with anyone (if your security policy permits). The most permissive setting is Anyone, which allows users to share files and folders with anyone without requiring sign-in. If your organization restricts sharing to authenticated users, select New and existing guests instead.
6. Delete the restored contractor account again
   After you have recreated all necessary external links, go back to Users > Deleted users in the Microsoft 365 admin center. Select the contractor account and click Delete permanently. This removes the account and its OneDrive site again. The new “Anyone with the link” links will continue to work because they do not depend on the deleted user’s identity.
7. Notify external recipients of the new links
   Send an email to all relevant business partners and vendors with the updated sharing links. Include instructions that they may need to clear their browser cache if they still see the request-access page.

If External Sharing Links Still Send Users to Request Access

Users see request-access page even after links are recreated

If recipients still see the request-access page after you have recreated the links, check the following:

• Browser cache: Ask the recipient to clear their browser cache or open the link in an InPrivate or Incognito window.
• Link expiration: Verify that the new link has not expired. In the OneDrive sharing dialog, set an expiration date far enough in the future, or remove the expiration entirely if policy allows.
• Domain allowlist: Ensure that the recipient’s email domain is not blocked by your organization’s external sharing restrictions in the SharePoint admin center.

Contractor’s OneDrive site cannot be accessed after restoration

If you restored the contractor account but cannot open their OneDrive site, the site may have been deleted permanently. OneDrive sites are retained for 30 days after account deletion, then permanently deleted. If more than 30 days have passed, you cannot recover the site. In this case, you must rely on any previous backups or ask users to reshare the files from their own OneDrive or SharePoint sites.

Shared links were created from SharePoint sites, not OneDrive

If the contractor shared files from a SharePoint site rather than their personal OneDrive, the link management is different. Go to the SharePoint site in the SharePoint admin center, select the document library, and use the same process to recreate links with “Anyone with the link.” SharePoint site permissions are not tied to the contractor’s personal account but to the site’s permission groups. Deleting the contractor account removes their direct permissions but does not break group-based links.

OneDrive External Sharing Link Types: User-Specific vs Anonymous

Item	Specific People (User-Specific)	Anyone with the Link (Anonymous)
Sign-in required	Yes, recipient must sign in with a Microsoft account or work/school account	No sign-in required
Dependency on deleted user	Broken if the recipient account is deleted	Not affected by user deletion
Expiration control	Can set expiration date	Can set expiration date and password
Best use case	Internal collaboration or known external partners	Public sharing, contractors, vendors
Security level	Higher — requires authentication	Lower — link can be forwarded

When offboarding contractors, use “Anyone with the link” for external sharing to avoid orphaned permissions. If your organization requires authenticated access, use “New and existing guests” in the SharePoint admin center sharing settings and invite external users as guests before sharing.

You can now audit and fix external sharing links that break after contractor offboarding by following the seven-step checklist. After restoring the deleted account, recreate all shared links using the “Anyone with the link” option to prevent future request-access errors. For long-term management, consider creating a standard operating procedure that requires admins to convert all user-specific external links to anonymous links before deleting a contractor account. This eliminates the need to restore accounts later and keeps external collaboration running without interruption.