Managing external identities to enable secure access for partners, customers, and other non-employees
Entra: Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help
Hello!
We are encountering an issue with the Microsoft Entra Graph API batch endpoint for user invitations.
We are trying to batch import users through the invitation batch API, but are receiving the following error:
{'responses': [{'id':'8','status':403,'headers':{'Cache-Control':'no-store, must-revalidate, no-cache','Content-Type':'application/json'},'body':{'error':{'code':'Forbidden','message':'Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help.','innerError':{'request-id':'8354dcf6-985e-445e-85fb-579002fd8a4a','date':'2026-08-25T08:01:58','client-request-id':'8354dcf6-985e-445e-85fb-579002fd8a4a'}}}},
Tenant ID: a9646eb2-3239-492b-9ed3-312fe909fe11
Request ID: 8354dcf6-985e-445e-85fb-579002fd8a4a
Timestamp: 2026-09-03T08:39:09
Exact error text: Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help.
We are expecting to receive a 201: Created for every record. Can someone perhaps lift the restriction on our tenant with the above mentioned ID? It is mission-critical for us to import these users as our product is scheduled to go live soon.
What we already did:
Verified the tenant guest invitation policy is set to allow invitations from admins and Guest Inviters. Verified the affected admin account is assigned the Global Administrator role. Confirmed the issue is not explained by missing user invite rights. Reviewed the Graph error response and confirmed the tenant is blocked from creating invitations due to suspicious activity.
Also, can someone give some information about rate-limiting of the Graph API to prevent running into such issues during our migration process?