How to Revoke a Self-Service Portal Invitation in Work 365
Applies to: Work 365 Self-Service Portal, Dynamics 365
Audience: Administrators, Support Technicians
Overview
If a Self-Service Portal invitation was sent in error or a user no longer needs access, you can revoke the invitation directly from the Contact record. Revoking immediately invalidates the registration link so it cannot be used or reused.
Steps to Revoke a Portal Invitation
1) Open the Contact
In Dynamics 365 / Power Platform, go to Contacts.
Find and open the Contact for the user whose invitation you want to revoke.
2) Revoke Access
On the Contact’s command bar select Work 365 dropdown Revoke Access
Work 365 will:
Cancel any outstanding portal invitation.
Invalidate the registration link so it can no longer be used.
Result: The Contact’s invitation is marked Revoked, and the original link becomes unusable.
3) Confirm the Revocation
Ensure Portal Invitation Status = Revoked on the Contact.
(Optional) Test the previously sent link to confirm it is now invalid/expired.
Review the Portal Access section to confirm there is no active invitation.
When to Use This
Revoke invitations when:
A user was invited in error or no longer needs portal access.
The invitation email address is incorrect or compromised.
The user left the organization or should not receive access.
Additional Considerations
If the User Already Registered
Revoking an invitation only affects pending registrations. If the user already completed registration:
Deactivate the Portal User (Contact) or
Remove Portal Web Roles in Portal Management to remove access going forward.
External Authentication (Microsoft Entra ID / B2B)
If you use Microsoft Entra ID (Azure AD) or another IdP:
Remove the corresponding guest user in Entra ID to fully cut off access.
Auditing
Keep an internal record of revoked invitations for compliance.
Work 365 logs invitation updates on the Contact Timeline.
Automation & Templates
If invitations are sent via Power Automate/Workflows, update logic so revoked users aren’t emailed again.
Review or update any related email templates to prevent unintended re-invites.
Verification Checklist
Contact shows Portal Invitation Status = Revoked.
Old registration link returns invalid/expired.
(If registered user) Portal web roles removed or user disabled.
(If using Entra ID) Guest user removed if full identity access should be revoked.