Why can’t everyone in my organization access my Microsoft Lists form through the shared link?

A Microsoft Lists form response link, a SharePoint list-sharing link, and a standalone Microsoft Forms link use different permission mechanisms, so first regenerate and test the actual Send form response URL rather than granting employees edit access to the list.

1. Recreate and test the correct response link

1. Open the list and its form.
2. Select Send form.
3. Confirm the audience is People in your organization with the link can respond.
4. Temporarily select another available audience, then switch back to the organization-wide option.
5. Copy the newly generated response URL from Send form—not:
   • the URL in the browser address bar;
   • Share list or Copy link from the list toolbar;
   • a collaboration or results-summary link.
6. Send the URL as plain text on its own line.
7. Have an affected employee:
   • sign in with their corporate work account;
   • open an InPrivate/Incognito window;
   • paste the URL directly into the address bar.

For standalone Microsoft Forms, Microsoft documents that an organization-scoped response link accepts signed-in users from that organization and that the response link must be copied from Collect responses.^1^ The equivalent behavior is not sufficient evidence that a Microsoft Lists form requires ordinary list-edit permissions, so do not grant Can edit items merely to troubleshoot the response link.

If directly sharing the form with a person works but a forwarded URL does not, compare the two URLs. A forwarded message may contain a rewritten Microsoft Defender Safe Links URL rather than the original response URL. Pasting the original URL directly is the appropriate test; this has been reported for standalone Microsoft Forms, although it does not establish Safe Links as the cause for Lists forms.^2^

2. Keep underlying list access read-only

If employees may view the list but must not change it:

1. Open the list.
2. Select Share.
3. Add an approved organization-wide security-enabled group or SharePoint group.
4. Select Can view, not Can edit items or Can edit list.

Can view permits viewing only. Can edit items permits adding, changing, and removing items, while Can edit list also permits changes to columns and views.^3^

If this list must have different access from its parent SharePoint site, a site/list owner can configure unique permissions:

1. Settings → List settings.
2. Under Permissions and Management, select Permissions for this list.
3. Select Stop Inheriting Permissions.
4. Retain Edit or Full Control for the reviewing team.
5. Assign the employee group Read.

Lists inherit permissions from their site until inheritance is stopped.^4^

Do not use a conventional custom “Add Items only” permission as the default solution here. SharePoint’s Add Items permission depends on View Items, View Pages, and Open, so it can expose existing submissions unless additional, properly tested item-level controls are in place.^5^ The available documentation does not establish that this permission is required for the newer Lists Send form response link.

3. If organization-wide response links still fail

Ask a SharePoint administrator to inspect the site containing the list. Lists stored in SharePoint follow that site’s sharing controls; lists under My Lists follow the owner’s OneDrive sharing controls.^3^

The administrator can perform a read-only check in SharePoint Online Management Shell:

Connect-SPOService -Url https://contoso-admin.sharepoint.com

Get-SPOSite "https://contoso.sharepoint.com/sites/SiteName" |
    Select Url, DisableCompanyWideSharingLinks, InformationBarriersMode

If DisableCompanyWideSharingLinks indicates that company-wide links are disabled, the administrator must determine whether that restriction is intentional before changing it. Microsoft documents the following change for affected SharePoint/OneDrive-backed Microsoft Forms file-upload scenarios:

Set-SPOSite `
  -Identity "https://contoso.sharepoint.com/sites/SiteName" `
  -DisableCompanyWideSharingLinks NotDisabled

This requires both SharePoint administrator and site collection administrator rights.^6^ Because that article addresses Microsoft Forms file uploads rather than all Microsoft Lists forms, change the setting only when the administrator confirms that the site restriction governs the failing response link and organizational policy permits the change.

If the freshly generated response URL still fails only for some authenticated employees, collect the failing URL type, timestamp, affected account, and exact error, then have the Microsoft 365 administrator open a support request. That is preferable to broadening list permissions without confirmation that list access is the missing prerequisite.

References

1. Share a form | Microsoft Support
2. Users unable to access Microsoft Form (404) - Microsoft Q&A
3. Share a list or list item | Microsoft Support
4. Customize permissions for a SharePoint list or library
5. Permission levels in SharePoint
6. Resolve file upload errors in Microsoft Forms