Microsoft, Microsoft 365, Outlook, SharePoint, OneDrive, Microsoft Teams, Microsoft Graph, Azure, and Entra are trademarks of the Microsoft group of companies. ImpressionsDirect360 is an independent provider and is not affiliated with, sponsored by, or endorsed by Microsoft.
Someone cannot open a site, a library, or a single document. The fix depends on which of those three it is, so establish that before changing anything.
The full URL and a screenshot of the message. Access denied at site level, at library level, and on a single file are three different faults that look identical to the person hitting them.
A personal Microsoft account signed in in the same browser is a frequent cause. An in-private window signed in with the work account settles it in seconds.
Access is granted through groups. If a colleague in the same role can open it, the fix is usually to correct the person's group membership rather than to grant them a one-off permission.
A folder that had unique permissions set on it once will not pick up later changes to the site. This is the reason for the classic case where someone can see the site but not one folder in it.
Wherever we can, by group membership. Per-file grants pile up into permissions nobody can audit a year later, which is how data ends up shared with people who left.
It is fine and it does reach the site owner, but it does not say which account you were signed in as or what you were trying to open, so it often produces the wrong grant. A ticket with the link and the error gets it right first time.
Because that folder has its own permissions. When unique permissions are set on an item it stops inheriting from the site, so later changes at site level never reach it. It is a common and entirely fixable state.
Yes, though we will usually suggest a group instead. One-off grants are invisible in a year's time — they are the main reason old permissions outlive the people who needed them.
Typically a group membership change, a site moved or renamed, a sharing link that expired, or a licence change on the account. We can see which from the tenant and tell you rather than guessing.
As soon as it blocks work. Also tell us if someone can open something they should not be able to — that is more urgent than the reverse and much less likely to get reported.
If the fault turns out to be in the Microsoft service rather than your setup, we take it from there — you keep one point of contact.