Issue with sending invite to external guest on Microsoft Entra ID

The error indicates that the account performing the invitation does not have sufficient privileges, even though it is believed to be a Global Administrator. The invite operation itself is blocked at the directory level, not at the Teams or application level.

Use the following checks and steps in Microsoft Entra admin center:

1. Confirm the role and tenant
   • Sign in to https://entra.microsoft.com with the affected account.
   • Go to Entra ID → Roles and administrators and verify that the account is actually assigned Global Administrator (or at least User Administrator), and that the assignment is in the same tenant where the guest is being invited.
2. Verify B2B collaboration is not blocked by cross-tenant access
   • If the error appears as “invitation is blocked by cross-tenant access settings,” the tenant’s cross-tenant access policies are preventing the invite.
   • Ask an administrator to review cross-tenant access settings and ensure B2B collaboration with the guest’s organization is allowed. If collaborating with another Microsoft Entra organization in a different Microsoft Azure cloud, configure Microsoft cloud settings accordingly.
3. Check for other B2B restrictions
   • If the invited user’s organization has disabled creation of Email Verified users, the invite redemption can fail with an error on their side. Their admin must allow Email Verified users or otherwise permit external collaboration. See the “Invitee’s Admin has disallowed EmailVerified Users” section in the troubleshooting article.
4. Confirm the guest is properly invited and email delivery
   • Invite the guest from Entra ID → Users → New user → Invite external user, fill in Email and Display name, then select Invite.
   • After sending, the guest account is created as a Guest user and an email is sent automatically.
   • If the guest does not receive the email, ask them to allow the sender address Invites@microsoft.com (or the appropriate regional variant) through their spam filters.
5. Resend the invitation and check status
   • Go to Entra ID → Users, select the guest user.
   • In My Feed → B2B collaboration tile, check Invitation state.
   • If it is PendingAcceptance, use Resend invitation. If this still fails with insufficient privileges, it confirms a policy/role restriction that must be corrected by an administrator with the appropriate rights in that tenant.

If, after confirming the account is truly Global Administrator in that tenant, the invite still fails with “Insufficient privileges,” the next step is to have another Global Administrator or User Administrator review and adjust cross-tenant access and external collaboration settings, as these can override role permissions and block invitations.

References:

• How to create, invite, and delete users
• Add guest users to the directory
• Tutorial: Bulk invite B2B collaboration users in Microsoft Entra External ID
• Troubleshoot common issues with Microsoft Entra B2B collaboration