Answered

Unable to update sharing permissions for Copilot Studio agent

(1) Share

Report

Posted on by FS-04091836-0 Microsoft Employee

I am the owner of the Copilot Studio agent "BP Agent".

The agent was previously shared with 33 users and sharing worked correctly. Recently, one of the users appears to have left the company and no longer exists in Company Entra ID.

After that, all sharing operations started failing, including adding new users and removing existing users.

Error returned by the service:

Code: GraphShareObjectNotFound

Inner Error: UserNotFound

Message: "The user with objectId '8836b513-079a-430f-bea7-11072c2ca5ea' was not found in Microsoft Entra ID."

It appears there is an orphaned sharing entry that cannot be resolved. Could you please tell me how to remove the invalid person or repair the sharing ACL for this agent?

The agent is still working for existing users, but all permission updates are failing.

thanks

Fabio

Categories:

Publish & channel management

General topics

Bot administration

All responses (4)

Answers (1)

Sort by

Verified answer

11manish 4,644 Super User 2026 Season 2 on at

Like
a
(2)

Report
Copy link

Link copied!

Your diagnosis is very likely correct: the deleted Entra account has left a stale principal in the agent's sharing metadata, and Copilot Studio is failing when it tries to resolve that principal during any ACL update.

The fact that existing users can still use BP Agent but all sharing modifications fail is particularly consistent with a problem in the sharing ACL synchronization, not with the agent itself.

I would not change security roles, republish the agent, or recreate the agent as the first response. First try the Share pane; if the orphaned entry cannot be removed because Entra can no longer resolve it, Microsoft Support needs to repair the backend sharing ACL.
Suggested answer

chiaraalina 2,553 Super User 2026 Season 2 on at

Like
a
(0)

Report
Copy link

Link copied!

Hi @FS-04091836-0

Have you already checked whether the deleted user still exists in the Power Platform environment?

In the Power Platform admin center, go to:

Environment → Settings → Users + permissions → Users

If the deleted user is still listed there, have you tried deleting the user from the environment?
Suggested answer

sannavajjala87 1,109 Super User 2026 Season 2 on at

Like
a
(1)

Report
Copy link

Link copied!

I agree with @11manish. The error points to a stale Entra ID principal referenced in the agent's sharing ACL. Since existing users can still access the agent but any permission change fails, it seems the sharing service is trying to validate an object that no longer exists. Checking whether the user still exists in the environment is worth trying, but if the orphaned principal cannot be removed through the Share experience, this is likely a backend ACL issue that Microsoft Support will need to clean up.

Thanks & Regards,

Manoj Annavajjala

www.powerplatformengineer.com
Suggested answer

Haque 4,205 Super User 2026 Season 2 on at

Like
a
(1)

Report
Copy link

Link copied!

Hi @FS-04091836-0,

In case we are in bit of hurry: If the user was very recently deleted, it can take a few minutes for the changes to sync across all Microsoft Entra ID domain controllers.

If the deleted user is still within the Azure AD retention period, temporarily restore the user, then reassign ownership or update sharing permissions to remove the orphaned entry.

If every trying fails I suggest to open up a support ticket with MS, they can perform backend cleanup of orphaned sharing entries and ACLs very quickly.

Governance and Life Cycle Actions for Agents.

I am sure some clues I tried to give. If these clues help to resolve the issue brought you by here, please don't forget to check the box Does this answer your question? At the same time, I am pretty sure you have liked the response!