Copilot Agent repeatedly asks for user permission for SharePoint Teams Site

(1) Share

Report

Posted on by DT-15091612-0

Hello,

My problem is that my Copilot Agent constantly asks for permission to access SharePoint Teams site despite clicking 'Allow', when asking a question:

The app is deployed to Microsoft Teams channel.

The query uses SharePoint Teams site files as the data source, and I have Member permissions on the site. I can access the files via SharePoint (mysite.sharepoint.com/teams/MySiteName). The Copilot agent is deployed requiring Entra authentication:

I've previously deployed this agent in a different tenant/environment except the knowledge source was a SharePoint Communications site (mysite.sharepoint.com/site/MySiteName) and I did not have issues there.

I am wondering if others have encountered an issue with this as well and have found a solution, thank you!

Categories:

Building Copilot Studio chatbots in Microsoft Teams

I have the same question (1)

All responses (3)

Answers (0)

Michael E. Gernaey 53,969 Moderator on at

Like (0)

Report
Copy link

Link copied!

Hi @DT-15091612-0

1. Can you please take a look at the Activities Tab for this and share what its doing (make sure cross topic is on)

2. Please go to Powerapps.com log in and go to ...More in the navigation, select connections

look for the connections used by this Agent and verify they are ok and not broken, you may need to re-authenticate them

Does this happen to everyone? Does it specifically happen to you?

Can you verify for me what permission is being used on the SharePoint Connection

Is this a Tool, Agent Flow, Power Automate for Copilot?

Was this reply helpful? Yes No
DT-15091612-0 4 on at

Like (0)

Report
Copy link

Link copied!

Hi Michael,

Thanks for the reply, I wrote out this long response after working through your questions, but I think I figured out the issue.

Answers:

1) In the Activities tab, the system hung on the source retrieval while waiting for the user response

2) No connection issues in powerapps.com

3) The issue affected other users as well

4) I believe the connection is via Power Platform connector when looking at the Knowledge tab

Context:

1) Relatively new SP site (1 days old)

2) Authentication to Agent is via Entra ID

3) I have permissions to site and can access contents

Problem:

1) When I trying to add knowledge for the first time to the new site a few days earlier, I could not find the SP site in the "Browse items" navigation. So instead, I manually entered the SP link for each knowledge source. This seemed to work as far as adding files:

3) After checking yesterday, I am now about to locate the SP site in "Browse items" and can select specific files to include. I did some testing when I repopulated the knowledge files and it works.

Long story short, just wait until the new SP site is fully active and searchable in "Browse items" before adding knowledge files from that location. I was a little too eager to build. Now, when it prompts me to give it access, it is able to retrieve data from that source.

Hope this helps someone!

Thanks Michael.

Was this reply helpful? Yes No
Suggested answer

DAnny3211 138 on at

Like (0)

Report
Copy link

Link copied!
Hi, The issue you're encountering—where your Copilot agent repeatedly prompts for SharePoint Teams site access despite granting permission—is typically related to **token scope mismatches** or **incomplete consent propagation** in Microsoft Entra (formerly Azure AD). Here's how to address it: --- ### 🔐 1. **Verify Entra Authentication Configuration** Ensure that: - The **Entra authentication** is correctly configured in Copilot Studio under **Settings > Security > Authentication**. - The **resource URI** includes the correct SharePoint site scope (e.g., `https://<tenant>.sharepoint.com`). - The **delegated permissions** include: - `Sites.Read.All` - `Files.Read.All` - `User.Read` These permissions must be granted **with admin consent** in the Entra ID portal. --- ### 🔁 2. **Clear Cached Permissions and Reconsent** Sometimes, stale or partial tokens can cause repeated prompts: - Ask the user to **sign out and back in** to Teams. - Clear Teams cache or try in an **incognito browser session**. - Revoke and re-grant consent via: `https://myapps.microsoft.com` → Find the app → Click **Manage your application** → Remove access → Reopen the app and re-consent. --- ### 🏷️ 3. **Check SharePoint Site Type and Permissions** You mentioned the agent works with a **SharePoint Communication Site** but not with a **Teams-connected SharePoint Site**. This may be due to: - **Permission inheritance issues**: Teams-connected sites often have more granular permission models. - Ensure the **app registration** has access to the specific site collection. - Confirm that the **user has at least Read access** to the site and the specific document libraries used as knowledge sources. --- ### 🧪 4. **Test with a Different Site or Environment** To isolate the issue: - Try deploying the same agent in a different environment or tenant. - Use a **SharePoint Communication Site** as a test to confirm if the issue is specific to Teams-connected sites. --- ### 📚 References - https://learn.microsoft.com/en-us/microsoft-copilot-studio/configure-authentication - https://learn.microsoft.com/en-us/graph/permissions-reference - https://learn.microsoft.com/en-us/sharepoint/understanding-permission-levels Thanks and best regards, Daniele Note: This response was prepared with support from Copilot to ensure clarity and completeness.

Was this reply helpful? Yes No