Entra: Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help.

Vincent van den Berg 0 Reputation points
2026-09-03T08:47:30+00:00

Hello!

We are trying to batch import users through the invitation batch API, but are receiving the following error:

{'responses': [{'id':'8','status':403,'headers':{'Cache-Control':'no-store, must-revalidate, no-cache','Content-Type':'application/json'},'body':{'error':{'code':'Forbidden','message':'Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help.','innerError':{'request-id':'8354dcf6-985e-445e-85fb-579002fd8a4a','date':'2026-08-25T08:01:58','client-request-id':'8354dcf6-985e-445e-85fb-579002fd8a4a'}}}},

Tenant ID: a9646eb2-3239-492b-9ed3-312fe909fe11
Request ID: 8354dcf6-985e-445e-85fb-579002fd8a4a
Exact error text: Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help.

We are expecting to receive a 201: Created for every record. Can someone lift the restriction on our tenant with the above mentioned ID? It is mission-critical for us to import these users as our product is scheduled to go live soon.

What we already did:

Verified the tenant guest invitation policy is set to allow invitations from admins and Guest Inviters. Verified the affected admin account is assigned the Global Administrator role. Confirmed the issue is not explained by missing user invite rights. Reviewed the Graph error response and confirmed the tenant is blocked from creating invitations due to suspicious activity.

Also, can someone give me some information about rate-limiting of the Graph API to prevent running into issues during our migration process?

To summarize:

  • Can someone lift the restriction on tenant a9646eb2-3239-492b-9ed3-312fe909fe11 so that we can use the batch invitation API again? Even inviting a single user is not allowed as of now.
  • Can someone provide clarification on restrictions Microsoft uses for posting to these Graph API's. Think of rate-limiting and such, so we can work to prevent such issues in the future and during our migration process?

Thank you very much in advance.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.