Official documentation checked October 14, 2026.
An encrypted sensitivity label does not automatically make every workbook unusable with Copilot in Excel. The result depends on the signed-in user’s rights, supported file and encryption configuration, and any DLP rule that excludes the workbook from Copilot processing.
If a protected workbook fails, keep its label and encryption in place while diagnosing the cause. Saving an unlabeled copy is not an appropriate general workaround for an organization’s information-protection policy.
Understand the Different Reasons a Workbook Can Be Restricted
Microsoft’s Copilot information-protection guidance says that returning data from label-encrypted content requires the user’s VIEW and EXTRACT usage rights. The requirement concerns the user, not a separate service account you should add to the label.
A label’s use of “Assign permissions now” or user-defined permissions does not by itself prove that Copilot is blocked. The assigned rights and supported scenario matter. Conversely, a label without encryption does not guarantee success if another policy or product limitation applies.
SharePoint and OneDrive also have documented encryption-processing requirements. Double Key Encryption and some other configurations differ from supported cloud-key labeling. Do not remove or replace keys to make a Copilot feature available.
Check the File, Account and Applied Protection
- Confirm the exact workbook. Record its location, format, app/platform and whether you are using a work account authorized for that file. Check for a second open copy before testing.
- Read the applied sensitivity label. Use the Sensitivity control available in your Excel version. Ask the information-protection administrator to inspect the actual configuration and your effective rights if the displayed description is insufficient.
- Record the exact symptom. A missing Copilot control, file-open denial and refusal to process one workbook are different problems. Do not diagnose encryption from a generic “can’t work with this file” message alone.
- Check general feature requirements separately. Use a harmless approved workbook for comparison. Do not transfer the restricted workbook’s contents into it.
A site or team container label is not automatically an item label on every contained workbook. Microsoft’s label scope documentation distinguishes container protection from file labeling; other policies can apply file labels separately.
Determine Whether a Copilot DLP Rule Is the Cause
The Copilot DLP location supports excluding labeled files from processing, including supported files open in Excel. A user can still have ordinary file access while the relevant Copilot content-processing skills are restricted.
Ask the administrator to check the matching label condition, rule action, user scope, policy mode and relevant evidence. This is different from checking whether the user can decrypt the workbook.
Do not assume that chart creation is data-free or guaranteed to remain available on a blocked workbook. UI messages and available actions vary. Test the exact task you need and respect the resulting restriction instead of trying alternate clients to circumvent it.
Resolve the Verified Issue Without Downgrading the Label
If the wrong account is active, use the correct approved identity. If general Copilot requirements are not met, correct the app or entitlement issue without touching the file’s protection. If the file is intentionally excluded, use the authorized manual workflow.
If the owner believes classification or permissions are incorrect, submit the specific file and business need for review. An approved correction should be based on the data’s sensitivity and intended recipients—not on a blanket request to remove encryption.
Retest using the same protected file after any approved correction, and verify that its label and intended access remain intact. For support, provide the app version, label identity, observed error and time, applicable policy findings and a nonsensitive reproduction. Never attach restricted data merely to demonstrate the problem.