Entra: Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help

Vincent van den Berg 0 Reputation points
2026-09-03T08:41:44.97+00:00

Hello!

We are encountering an issue with the Microsoft Entra Graph API batch endpoint for user invitations.

We are trying to batch import users through the invitation batch API, but are receiving the following error:

{'responses': [{'id':'8','status':403,'headers':{'Cache-Control':'no-store, must-revalidate, no-cache','Content-Type':'application/json'},'body':{'error':{'code':'Forbidden','message':'Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help.','innerError':{'request-id':'8354dcf6-985e-445e-85fb-579002fd8a4a','date':'2026-08-25T08:01:58','client-request-id':'8354dcf6-985e-445e-85fb-579002fd8a4a'}}}},

Tenant ID: a9646eb2-3239-492b-9ed3-312fe909fe11
Request ID: 8354dcf6-985e-445e-85fb-579002fd8a4a

Timestamp: 2026-09-03T08:39:09

Exact error text: Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help.

We are expecting to receive a 201: Created for every record. Can someone perhaps lift the restriction on our tenant with the above mentioned ID? It is mission-critical for us to import these users as our product is scheduled to go live soon.

What we already did:

Verified the tenant guest invitation policy is set to allow invitations from admins and Guest Inviters. Verified the affected admin account is assigned the Global Administrator role. Confirmed the issue is not explained by missing user invite rights. Reviewed the Graph error response and confirmed the tenant is blocked from creating invitations due to suspicious activity.

Also, can someone give some information about rate-limiting of the Graph API to prevent running into such issues during our migration process?

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.