When you click a citation link generated by Copilot in Microsoft 365 apps like Word or Teams, you might see an Access Denied error instead of the source document. This happens because Copilot can reference files stored in locations where your account lacks explicit read permissions. The citation link itself is valid, but the underlying file permissions block your access. This article explains why the error occurs and shows you how to resolve it by adjusting SharePoint and OneDrive permission settings.
Key Takeaways: Fixing Access Denied on Copilot Citations
- SharePoint site permission inheritance: Broken inheritance on a document library or folder can block citation links even if you have access to the parent site.
- OneDrive sharing settings: Files in OneDrive shared via direct access links require the owner to grant you explicit edit or read rights for citation links to work.
- Microsoft 365 admin center > SharePoint admin > Site permissions: Use this path to restore permission inheritance or add users to the Members group for the affected site.
Why Copilot Citations Show Access Denied
Copilot generates citations by retrieving the file URL from Microsoft Graph. The URL points to the exact document location in SharePoint or OneDrive. When you click the citation, your browser or app sends an authentication token with your user identity. The destination site checks whether your token includes the Read permission on that specific file. If the file resides in a library with broken permission inheritance, or if the file was shared using a link type that does not include your account, the permission check fails and returns Access Denied.
The root cause is almost always a permission mismatch. Copilot does not create special access for citations. It relies on the existing permissions of the source file. If you cannot open the file directly from SharePoint or OneDrive, the citation will also fail.
Steps to Fix Access Denied on Copilot Citations
Follow the steps below in order. Each method addresses a different permission scenario. Start with Method 1 because it covers the most common cause.
Method 1: Restore Permission Inheritance on the Document Library
- Open the SharePoint site in your browser
Navigate to the SharePoint site that contains the file referenced in the Copilot citation. You can find the site URL by right-clicking the citation link in Copilot and selecting Copy link address. The site URL appears before the file path. - Go to the document library
From the left navigation pane, select Documents or the specific library name where the file is stored. - Open Library Settings
Click the gear icon in the top-right corner, then select Library settings. If you do not see this option, you lack owner permissions and must ask the site owner to perform this step. - Click Permissions for this document library
This option is under the Permissions and Management section. - Click Inherit Permissions
If the button is active, permission inheritance is broken. Click Inherit Permissions to restore inheritance from the parent site. Confirm the action when prompted. This grants all site members access to the library. - Test the citation again
Return to the Copilot response and click the citation. The file should open without the Access Denied error.
Method 2: Add Your Account to the SharePoint Site Members Group
- Open the SharePoint site
Use the same method as Method 1 to locate the site URL from the citation link. - Click the gear icon and select Site permissions
This opens the Permissions pane on the right side of the page. - Click Add members > Add members to group
Choose the Members group from the dropdown list. This group has Edit permissions by default, which includes Read access. - Enter your email address and click Share
If you are the site owner, add your own account. If you are not the owner, ask the owner to add you. - Verify access
Navigate to the file directly in the library to confirm you can open it. Then test the citation link in Copilot.
Method 3: Update OneDrive Sharing Link Permissions
- Open the OneDrive folder in your browser
Go to your OneDrive at onedrive.live.com and locate the file that the citation references. - Right-click the file and select Share
This opens the sharing dialog. - Click the current link type dropdown
If the link type is People with existing access, change it to Specific people. - Enter your email address and set permission to Can view
Click Apply. This grants you explicit read access to the file. - Test the citation
Return to Copilot and click the citation link. The file should open without error.
If Copilot Still Shows Access Denied After the Fix
Copilot citation references a file in a private channel
Private channel files are stored in a separate SharePoint site that is not visible to all team members. Only members of that private channel have access. To fix this, ask the private channel owner to add you as a member of the channel. Alternatively, request that the file be moved to a standard channel library.
Citation link points to a file in a OneDrive folder owned by another user
When Copilot references a file from another user’s OneDrive, the citation link includes a sharing token. If that token has expired or the owner removed your access, you will see Access Denied. Contact the file owner and ask them to reshare the file using the Specific people link type with you included.
Your Microsoft 365 license does not include SharePoint Online
Some Microsoft 365 Business Basic or Business Standard licenses include SharePoint Online. However, if you have a Microsoft 365 F3 or F1 license, SharePoint Online access may be restricted to read-only or blocked entirely. Verify your license plan in the Microsoft 365 admin center under Billing > Licenses. If your license lacks SharePoint Online, upgrade to a plan that includes it.
Copilot Citation Access Denied: Permission Scenarios Compared
| Scenario | SharePoint with broken inheritance | OneDrive with direct access link |
|---|---|---|
| Root cause | Library or folder permissions do not match the parent site | File link type does not include your user account |
| Fix method | Restore inheritance or add user to site Members group | Change link type to Specific people and add your email |
| Permission requirement | Owner or site collection admin | File owner or co-owner |
| Effect on other users | All site members gain access to the library | Only the added user gains access to that file |
After applying the correct fix, the citation link in Copilot should open the source document directly. To prevent future Access Denied errors, review your SharePoint site permission inheritance settings before relying on Copilot citations. If your organization uses many private channels or external OneDrive shares, consider asking your Microsoft 365 admin to enable the SharePoint permission report. This report lists all sites with broken inheritance so you can audit them proactively.