Managing external identities to enable secure access for partners, customers, and other non-employees
New-MgInvitation_CreateExpanded: Invitations are blocked for this directory due to suspicious activity.
Issue Description:
=======================
Entra -> Inviting external user through GUI or through New-MgInvitation fails.
Note: => It worked before!
GUI says: User invitation failed -> insufficient privileges to complete operation
cli/pwsh:
New-MgInvitation -InvitedUserEmailAddress "******@domain.com" -InviteRedirectUrl "https://myapps.microsoft.com" -SendInvitationMessage:$true New-MgInvitation_CreateExpanded: Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help.
Status: 403 (Forbidden)
ErrorCode: Forbidden
Date: 2026-05-27T14:49:27
We've been waiting for a resolution through the case ID# xxxxxxx without any relevant progress for a long period time...
Could this issue be resolved through this channel? If Y - Provide clear ETAs and expectations.
Else help me in prioritizing and escalating TrackingID#xxxxxxx ?
I was expecting this to be something quick... a quick win for support...someone to tick something (check /knob) somewhere... at tenant level.
Similar issue addressed here == https://learn.microsoft.com/en-us/answers/questions/4375442/invitations-are-blocked-for-this-directory-due-to
Just would stress that we have not done any bulk invitations... although have done several tests with different accounts, delete and trying to automate the invitations, etc... nothing else.