A cloud-based identity and access management service for securing user authentication and resource access
I remember this happening to one of our customers when we were helping them move a large number of external users into a new directory. Once they pushed out a big batch of guest invitations, Microsoft’s security system flagged it as unusual activity and automatically put a temporary block on the tenant.
After that block kicks in, all new invites fail, and you even start seeing confusing errors like ‘Insufficient privileges,’ even though nothing is wrong with your roles or permissions. It’s the service protecting the tenant, not an admin issue.
The only way to clear it, is to contact Microsoft support and provide the tenant ID, the correlation ID from the error, and a short explanation of the migration work.
Usually, after Microsoft verifies the activity was legitimate, they removed the block and everything goes back to normal.
There’s no setting in the portal to undo this yourself, so support has to lift the restriction on their side.