Copilot in Excel External Data Connection Failures: Fix Steps

When Copilot in Excel fails to connect to external data sources, you may see error messages such as “Data connection failed” or “Copilot cannot access this data source.” This problem typically occurs when security policies, firewall rules, or authentication tokens block Copilot from reaching external databases, SharePoint lists, or Azure services. The root cause is often a misconfigured Microsoft 365 tenant setting or a missing OAuth permission grant. This article explains why these failures happen and provides the exact steps to restore Copilot’s ability to read external data in Excel.

Why Copilot in Excel Fails to Connect to External Data

Copilot in Excel relies on Microsoft Graph and external connectors to access data outside the current workbook. When a connection fails, the cause is almost always one of three things: missing or expired OAuth tokens, blocked network endpoints, or incorrect data source permissions in the Microsoft 365 tenant. Copilot cannot bypass security policies set by your organization. If your tenant administrator has not granted the required permissions for Microsoft Graph data sources or if the firewall blocks the necessary URLs, Copilot will show a connection error.

Another common cause is the use of unsupported external data formats. Copilot supports only data sources that are registered as Microsoft Graph connectors or that use the Power Query online service. Direct connections to on-premises SQL Server databases without a gateway are not supported. If your workbook uses a legacy OLE DB or ODBC connection, Copilot will not be able to read that data.

Which External Data Sources Does Copilot Support?

Copilot in Excel can connect to the following external data sources:

• SharePoint Online lists and libraries
• Microsoft Dataverse tables
• Azure SQL Database via Power Query online
• Microsoft Graph connectors such as ServiceNow, Jira, and Salesforce
• Excel tables stored in OneDrive for Business or SharePoint Online

Data sources that are not supported include on-premises SQL Server without a gateway, plain text files on network shares, and web pages that require interactive login. If your data source is not in the supported list, you must migrate it to a supported service before Copilot can use it.

Steps to Fix Copilot External Data Connection Failures in Excel

Follow these steps in order. After each step, test Copilot in Excel by asking it to summarize or analyze data from the external source. Do not skip the tenant-level checks unless you are certain that permissions are already configured.

Step 1: Verify Microsoft 365 Copilot Data Source Permissions

1. Open the Microsoft 365 admin center
   Go to https://admin.microsoft.com and sign in with a Global Administrator or Copilot Administrator account.
2. Navigate to Copilot settings
   In the left navigation, select Settings then Org settings. Under the Copilot tab, click Data sources.
3. Enable external data sources
   Ensure that the toggle for Allow Copilot to access external data sources is turned on. If it is off, turn it on and click Save.
4. Check specific source permissions
   Under the same page, review the list of registered data sources. If your external source is listed but marked as Blocked, click the source name and change the status to Allowed.

Step 2: Grant OAuth Permissions for Microsoft Graph

1. Open Azure Active Directory admin center
   Go to https://aad.portal.azure.com and sign in with a Global Administrator account.
2. Select Enterprise applications
   In the left menu, choose Enterprise applications. Search for Microsoft Copilot in the list of applications.
3. Review API permissions
   Click on the Copilot application, then select API permissions. Verify that the following permissions are listed with a status of Granted for [your tenant]:
   – Microsoft Graph > User.Read
   – Microsoft Graph > Sites.Read.All
   – Microsoft Graph > ExternalItem.Read.All
4. Grant admin consent
   If any permission shows Not granted, click the Grant admin consent for [tenant name] button. Confirm the consent dialog.

Step 3: Configure Excel Trust Center for External Data

1. Open Excel
   Launch Excel on your Windows device. Do not open a workbook yet.
2. Access Trust Center settings
   Go to File > Options > Trust Center. Click the Trust Center Settings button.
3. Allow external data connections
   In the Trust Center dialog, select External Content. Under Security settings for Data Connections, choose Enable all Data Connections. Under Security settings for Workbook Links, choose Enable automatic update for all Workbook Links. Click OK twice to close all dialogs.

Step 4: Verify Network Endpoint Access

1. Check firewall rules
   Contact your network administrator to ensure that the following URLs are not blocked by your corporate firewall or proxy:
   – https://graph.microsoft.com
   – https://api.copilot.microsoft.com
   – https://sharepoint.com and all subdomains for SharePoint Online
2. Test connectivity from Excel
   In Excel, go to Data > Get Data > From Online Services > From SharePoint Online List. Enter a SharePoint site URL. If this connection succeeds, the network path is open. If it fails, the issue is likely a firewall or proxy block.

Step 5: Refresh OAuth Tokens

1. Sign out of Microsoft 365
   In Excel, click your profile picture in the top-right corner and select Sign out.
2. Clear cached credentials
   Open Windows Credential Manager. Go to Control Panel > User Accounts > Credential Manager > Windows Credentials. Remove any entries that contain MicrosoftOffice or MicrosoftGraph.
3. Restart Excel and sign in again
   Close Excel completely. Reopen it and sign in with your Microsoft 365 work or school account. Then test Copilot with the external data source.

If Copilot Still Has Issues After the Main Fix

Copilot Returns “Data source not found” for a SharePoint List

This error occurs when the SharePoint list URL has changed or when the list is in a site that the user does not have access to. Verify that the list still exists at the expected URL. Ask the SharePoint site owner to confirm your permissions. If the list was moved to a different site, update the data connection in Excel by going to Data > Queries & Connections, right-clicking the query, and selecting Properties. Change the source URL to the new location.

Copilot Cannot Access External Data After a Microsoft 365 Update

Microsoft occasionally updates the permission requirements for Copilot. After a major update, previously granted permissions may be reset. Repeat Step 2 and verify that all required OAuth permissions are still granted. Also check the Microsoft 365 Message Center in the admin center for any service advisories related to Copilot data sources.

Copilot Shows “Your organization has blocked this data source”

This message appears when a Conditional Access policy in Azure AD blocks the external data source. Work with your IT administrator to review the Conditional Access policies under Azure AD > Security > Conditional Access. Look for policies that target the Copilot app or the Microsoft Graph service. Ensure that the external data source’s IP range or domain is allowed in the policy.

Item	Copilot with Microsoft Graph	Copilot with External Connectors
Data source type	Microsoft 365 services such as SharePoint, OneDrive, and Exchange	Third-party services such as ServiceNow, Jira, and Salesforce
Permission required	Microsoft Graph API permissions (Sites.Read.All, User.Read)	External Item.Read.All and connector-specific permissions
Setup location	Azure AD > Enterprise applications > Copilot > API permissions	Microsoft 365 admin center > Settings > Org settings > Copilot > Data sources
Network endpoint	graph.microsoft.com	api.copilot.microsoft.com plus the connector’s native endpoint
Typical failure cause	Expired OAuth token or missing Sites.Read.All permission	Connector not registered or blocked by Conditional Access

The steps in this article resolve the majority of external data connection failures for Copilot in Excel. After completing all five steps, test Copilot by asking it to summarize data from a SharePoint list or an Azure SQL database. If the problem persists, check the Microsoft 365 service health dashboard for any ongoing incidents. As an advanced tip, you can use the Microsoft Graph Explorer to test the external data connection manually before relying on Copilot in Excel. This helps isolate whether the issue is with Copilot itself or with the underlying data source.