When you ask Copilot Chat a question about your work files, you expect it to return information from your emails, documents, and calendar. Instead, you see a message that Copilot has no work content results or it returns generic web answers only. This problem usually happens because Copilot lacks the correct permissions to access your Microsoft 365 data or because your tenant administrator has not enabled the required data source connections. This article explains the technical root cause of this failure and provides the exact steps to restore work content results in Copilot Chat.
Copilot Chat relies on Microsoft Graph to retrieve grounded responses from your organization’s data. When the connection to Graph is broken or restricted, Copilot falls back to public web search and cannot see your internal content. The fix involves verifying your Copilot license, enabling the correct data sources in the Microsoft 365 admin center, and checking user-level permissions. Follow the steps below to resolve the issue.
Key Takeaways: Restoring Work Content in Copilot Chat
- Microsoft 365 admin center > Settings > Copilot > Data sources: Must have “Microsoft Graph” enabled for Copilot to read work content.
- Microsoft 365 admin center > Users > Active users > Licenses and apps: Each user must have a Copilot for Microsoft 365 license assigned.
- Azure AD > Enterprise applications > Microsoft Copilot Service > Permissions: Ensure the service principal has consent to read Microsoft Graph data for your tenant.
Why Copilot Chat Cannot Access Work Content
Copilot Chat in Microsoft 365 uses a feature called grounded responses. When you ask a question, Copilot queries Microsoft Graph to find relevant data from your organization’s Exchange Online, SharePoint Online, OneDrive for Business, and Microsoft Teams. If Copilot cannot connect to Graph, it returns either no results or results from the public web.
The most common root causes are:
Missing or Expired Copilot License
Each user must have a Copilot for Microsoft 365 license assigned. Without this license, Copilot Chat operates in a limited mode that does not include Graph-based search. Check the user’s license assignment in the Microsoft 365 admin center.
Data Source Configuration Blocked
The tenant administrator can disable specific data sources in the Copilot settings. If Microsoft Graph data sources are turned off, Copilot cannot read any work content. This setting is controlled in the Microsoft 365 admin center under Copilot settings.
Service Principal Permissions Missing
The Copilot service principal in Azure Active Directory requires admin consent to read Microsoft Graph data. If the consent was revoked or never granted, Copilot cannot access your tenant’s content. This is a tenant-wide setting that affects all users.
User Permission Restrictions
Even if the tenant settings are correct, an individual user may lack permission to view specific documents or mailboxes. Copilot respects the same permissions that the user has in Microsoft 365. If a user cannot open a file manually, Copilot will not return it as a result.
Steps to Fix Copilot Chat Showing No Work Content Results
Follow these steps in order. After each step, test Copilot Chat by asking a question about a recent email or document, for example, “What did I discuss in my last meeting with the marketing team?”
- Verify the user has a Copilot for Microsoft 365 license
Sign in to the Microsoft 365 admin center at admin.microsoft.com. Go to Users > Active users. Select the affected user and click the Licenses and apps tab. Confirm that Copilot for Microsoft 365 is checked. If not, check the box and save. Wait 5 minutes for the license to propagate. - Enable Microsoft Graph data sources in Copilot settings
In the same admin center, go to Settings > Copilot. Under Data sources, ensure Microsoft Graph is set to On. If it is off, toggle it on and click Save. This step allows Copilot to query your tenant’s Exchange, SharePoint, and Teams data. - Grant admin consent for the Copilot service principal
Open the Azure Active Directory admin center at entra.microsoft.com. Go to Enterprise applications > All applications. Search for Microsoft Copilot Service. Select the app and click Permissions. If the status shows Not granted, click Grant admin consent and sign in as a Global Administrator. This consent allows Copilot to read Microsoft Graph data across the tenant. - Check user permission to the target content
Ask the user to open a specific file or email directly in Microsoft 365. If the user cannot access it, Copilot will not return it. The user must have at least Read permission on the document, mailbox, or site. If needed, a SharePoint or Exchange administrator can adjust permissions. - Clear the Copilot cache and sign out
In Copilot Chat, click your profile icon and select Sign out. Close the browser or app completely. Sign back in and test again. This clears any cached permissions or session data that may be stale.
If Copilot Still Has Issues After the Main Fix
After completing the steps above, Copilot Chat should return work content. If it does not, one of the following scenarios may apply.
Copilot Returns Generic Output Instead of Tenant-Specific Data
This indicates that Copilot is using public web search instead of Microsoft Graph. Revisit the data source settings in the admin center. Confirm that no conditional access policy blocks the Copilot service principal. In Azure AD, go to Conditional Access > Policies and check for any policy that targets the Microsoft Copilot Service app. If a policy blocks access, create an exception for this app.
Copilot Chat Shows an Error About Insufficient Permissions
This error appears when the user does not have a valid Copilot license or when the tenant-wide consent is missing. Double-check the license assignment in step 1 and the admin consent in step 3. If the error persists, remove and re-add the Copilot license for the user. Wait 30 minutes and test again.
Work Content Results Only Appear for Some Users
If one user gets work content but another does not, the problem is user-specific. Compare the license and permission settings between the working and non-working user. Look for differences in the assigned licenses, group memberships, or location-based policies. Some tenants apply different policies to users in different countries.
Copilot Chat Without Work Content vs With Work Content: Key Differences
| Item | Without Work Content | With Work Content |
|---|---|---|
| Data source used | Public web only | Microsoft Graph + public web |
| Example response | “Here is a general answer from the web” | “I found this email from John about the project deadline” |
| Required license | Microsoft 365 Basic or Standard | Copilot for Microsoft 365 |
| Admin consent needed | No | Yes, for Microsoft Copilot Service |
| User permission impact | None | Respects user’s existing permissions |
When Copilot Chat has access to work content, it can answer questions about your specific files, emails, and meetings. Without that access, it behaves like a standard web-based AI assistant. The table above shows the practical differences between the two modes.
You can now restore work content results in Copilot Chat by verifying the license assignment, enabling Microsoft Graph data sources in the Microsoft 365 admin center, and granting admin consent for the Copilot service principal in Azure AD. Test the fix by asking Copilot a question about a recent email or document. For persistent issues, check conditional access policies and user-level permissions. As an advanced tip, you can use the Microsoft 365 admin center’s Reports > Copilot for Microsoft 365 usage report to verify that Copilot is successfully querying Microsoft Graph for your tenant.