When you run a Copilot access review in the Microsoft 365 admin center, the report may list users who have no Copilot license assigned. This creates confusion because the access review tool is meant to show only licensed users. The root cause is a synchronization delay between the Entra ID group membership and the license assignment status. This article explains why unlicensed users appear and provides the exact steps to remove them from the review scope.
Key Takeaways: Removing Unlicensed Users from Copilot Access Reviews
- Microsoft 365 admin center > Copilot > Access reviews: Review the list of users and filter by license status before approving or denying access.
- Entra ID admin center > Groups > Copilot group > Members: Remove unlicensed users from the group to prevent them from appearing in future reviews.
- Microsoft 365 admin center > Billing > Licenses > Copilot license assignments: Assign or remove licenses to correct the mismatch between group membership and license status.
Why Unlicensed Users Appear in Copilot Access Reviews
Copilot access reviews rely on Entra ID groups to determine who should be reviewed. When a user is added to a group that is scoped for a Copilot access review, the system includes that user in the review even if no Copilot license is assigned to them. This happens because group membership and license assignment are separate operations in the Microsoft 365 tenant.
The access review engine does not cross-check license assignment in real time. It reads the group membership snapshot taken at the start of the review cycle. If a user was added to the group before the review began but the license was not assigned, or if the license was removed after the review started, the user remains in the review until the next cycle.
Another common scenario is a bulk user import where the group membership is updated before the license provisioning job completes. The access review starts before the license provisioning finishes, causing unlicensed users to appear. Understanding this separation of concerns helps administrators decide whether to fix the group membership, the license assignment, or both.
Steps to Remove Unlicensed Users from the Access Review
Follow these steps to correct the access review scope and prevent unlicensed users from appearing in future reviews. You can choose the method that matches your administrative preference.
Method 1: Filter the Access Review Report and Remove Users
- Open the Copilot access review
Go to the Microsoft 365 admin center at admin.microsoft.com. In the left navigation, expand Copilot and select Access reviews. Click the review name that shows unlicensed users. - Apply a license filter
In the review pane, click Add filter. Select License status from the dropdown. Set the filter to Not assigned. This displays only users who lack a Copilot license. - Remove unlicensed users from the review
Select all users in the filtered list. Click Remove from review. Confirm the action. The system removes these users from the current review cycle only. They will reappear in the next cycle if the group membership remains unchanged.
Method 2: Remove Users from the Entra ID Group
- Open the Entra ID group used for Copilot access
Go to the Entra ID admin center at entra.microsoft.com. In the left navigation, select Groups > All groups. Find the group that is scoped for the Copilot access review. This group name typically contains “Copilot” or is listed in the access review settings. - Identify unlicensed members
Click the group name, then select Members. Review the list. For each user who does not have a Copilot license, note their user principal name. You can cross-check license status in the Microsoft 365 admin center under Billing > Licenses > Copilot. - Remove unlicensed members
Select the unlicensed user. Click Remove. Confirm the action. Repeat for all unlicensed users. The next access review cycle will not include these users because they are no longer group members.
Method 3: Assign Licenses to Group Members
- Go to license assignment settings
In the Microsoft 365 admin center, go to Billing > Licenses. Select the Copilot product. - Assign licenses to unlicensed users
Click Assign licenses. Search for the unlicensed users by name or email. Select the checkbox next to each user. Click Assign. The license provisioning process starts immediately. - Wait for license synchronization
License provisioning can take up to 30 minutes. After the licenses are assigned, the users remain in the group and in the access review. The next review cycle will show them as licensed users.
If Copilot Access Reviews Still Show Unlicensed Users
If after following the steps above the access review still displays unlicensed users, check for these specific issues.
Dynamic Group Membership Updates Are Delayed
If the Copilot access group uses dynamic membership rules based on user attributes like department or job title, the group membership update can take up to 24 hours. During this period, users who no longer match the rule remain in the group and appear in the review. To fix this, manually remove the user from the group using the Entra ID admin center steps above. The dynamic rule will not re-add them until the next evaluation cycle.
License Removal Did Not Trigger Group Removal
If you removed a Copilot license from a user but the user remains in the access review group, the group membership must be updated separately. The license removal does not automatically remove the user from the group. Use Method 2 to remove the user from the group. If the group uses a dynamic rule based on license assignment, update the rule to include a condition such as (user.assignedLicenses -any (assignedPlan.servicePlanId -eq "copilot-plan-id")). This ensures that only licensed users are added to the group automatically.
Access Review Was Created Before License Synchronization
If the access review was created before the license provisioning job completed, the review snapshot includes users who were in the group at the time of creation. The review does not refresh its user list mid-cycle. To fix this, cancel the current review and create a new one after verifying that all group members have licenses assigned. In the Microsoft 365 admin center, go to Copilot > Access reviews, select the review, and click End review. Then click New review and follow the setup wizard.
| Item | Filtering the Review Report | Removing from Entra ID Group | Assigning Licenses |
|---|---|---|---|
| Description | Temporarily hides unlicensed users from the current review | Permanently removes users from the group scope | Corrects the license status for group members |
| Effect on future reviews | Users reappear in the next cycle if group membership unchanged | Users do not reappear unless re-added | Users remain in the review but now appear as licensed |
| Administrative effort | Low — requires only filter and remove action | Medium — requires group navigation and member removal | Medium — requires billing navigation and license assignment |
| Best for | Quick fix for a single review cycle | Permanent cleanup of group membership | Ensuring all group members have the correct license |
You can now identify why unlicensed users appear in Copilot access reviews and apply the appropriate fix. For ongoing accuracy, schedule a weekly license audit using the Microsoft 365 admin center reports. Combine this with a dynamic group rule that ties membership to license assignment to prevent the issue from recurring.