SharePoint Access Denied: How to Fix Permissions Properly
'Access denied' and 'You need permission' messages usually come from one of a handful of causes. Here's how to find the real one and fix it without granting everyone everything.
1. Check what the person can actually access
On the site, go to Settings, Site permissions, then Advanced permissions settings and use Check Permissions with the person's name. It shows what they have and which group it comes from.
2. Look for broken inheritance
If someone can open the site but not one library, folder or file, that item probably has unique permissions. In the library, select the item and open Manage access, or check Advanced permissions on the library. A message saying the item has unique permissions confirms it.
To fix it, add the right group there, or choose Delete unique permissions so it inherits from the site again. Restoring inheritance is usually the tidier fix.
3. Signed in with the wrong account
A very common cause: the person opened a link while signed in with a personal Microsoft account or a different work account. Have them open the link in a private browser window and sign in with the account the file was shared with.
4. Sharing links and external users
'Specific people' links only work for the people named. If external sharing is turned off for the site or the whole organisation, guests can't get in at all. An admin can check sharing settings in the SharePoint admin center.
Prevent it next time
- Give access through groups (Owners, Members, Visitors), not to individuals.
- Avoid unique permissions on folders and files. If a set of files needs different access, give it its own site or library.
- Review site access every quarter, and remove people who've left.
Want this done for you?
I build this for clients every week. Book a free 30-minute call and I'll tell you exactly what your team needs.