Invitations are blocked for this directory due to suspicious activity

Question

Invitations are blocked for this directory due to suspicious activity

WarwickW-5009 0

We have a new tenant that's being used as a lab. The invitations are created using PowerShell. The script was able to invite 10 users before being blocked. Opened a Microsoft support case but nothing has happened. Any other channel we can go through to get the block released?

Thanmayi Godithi 8,470 Reputation points Microsoft External Staff Moderator

2026-04-08T16:14:04.8166667+00:00

Hi WarwickW-5009 ,

Thank you for reaching out to Microsoft Q&A.

As part of its security enhancements, Microsoft has anomaly detection systems in place to identify unusual activity, such as an unusually high number of invitations being sent from a tenant. If such anomalies are detected, the tenant may be temporarily blocked.

To unblock your tenant, please provide a business justification explaining the need for bulk invitations along with requested details via private message only (do not post publicly).

1 answer

Your answer

Thanmayi Godithi 8,470 Reputation points Microsoft External Staff Moderator

2026-04-08T16:14:04.8166667+00:00

Hi WarwickW-5009 ,

Thank you for reaching out to Microsoft Q&A.

As part of its security enhancements, Microsoft has anomaly detection systems in place to identify unusual activity, such as an unusually high number of invitations being sent from a tenant. If such anomalies are detected, the tenant may be temporarily blocked.

To unblock your tenant, please provide a business justification explaining the need for bulk invitations along with requested details via private message only (do not post publicly).

Answer 1

The block on invitations due to suspicious activity can only be removed by Microsoft; there is no alternate technical channel or setting in Microsoft Entra ID that can override it from the admin side.

The available options are:

Continue working through the existing Microsoft support case
- This type of restriction is enforced at the service/backend level, similar to Acceptable Use Policy and tenant-level blocks described in the context. It requires internal review and action by Microsoft support/engineering.
- Avoid opening duplicate tickets; guidance in similar cases is to refrain from submitting another assistance request while the existing case is in process.
Ensure the case is owned by the correct support team and properly escalated
- When contacted by support, be prepared to provide:
  - Exact error messages/screenshots from the invitation attempts.
  - Description of how invitations are being sent (PowerShell script, accounts used, volume, and frequency).
  - Confirmation that this is a lab tenant and the intended use.
- Ask the support engineer explicitly to escalate to the internal team that handles suspicious-activity and Acceptable Use Policy-related blocks on invitations/tenants.
If the tenant is very new or low-activity, confirm it is not in an inactive/blocked state
- Inactivity-related tenant blocks (AADSTS5000225) are also handled only by Microsoft support and cannot be self-cleared. If any sign-in or portal access errors appear in addition to the invitation block, mention them in the same ticket so they are checked together.

There is no documented self-service or alternative admin portal path to clear a suspicious-activity invitation block; resolution depends on Microsoft support investigation and backend unblocking.

References:

ArtB 0 Reputation points

2026-04-09T04:48:33.9766667+00:00

How do I contact support to resolve this issue which I am also having and need to invite more guests to our TEAMS.

Share via

Invitations are blocked for this directory due to suspicious activity

1 answer

Your answer