Microsoft 365 Copilot Your Organization Has Disabled This Feature Error: Fix

When you see the error “Your organization has disabled this feature” while trying to use Copilot in Microsoft 365 apps, your access to AI-powered assistance is blocked. This error message appears because your tenant administrator has set a policy that prevents users from enabling or using Copilot. The restriction can come from a global toggle in the Microsoft 365 admin center or from a specific Conditional Access policy in Microsoft Entra ID. This article explains the exact causes of this error and provides step-by-step methods for administrators to remove the restriction.

Why the Copilot Feature Is Disabled by Your Organization

The error “Your organization has disabled this feature” is a permission-based block, not a technical failure. Microsoft 365 tenants have a hierarchical policy system that controls which services are available to users. Copilot is treated as a premium add-on service, and its availability depends on two layers of configuration.

The first layer is the tenant-wide Copilot toggle. Administrators can disable Copilot for all users through the Microsoft 365 admin center. When this switch is off, every user in the tenant sees the disabled feature error regardless of their license assignment.

The second layer is Conditional Access policies in Microsoft Entra ID. These policies apply to cloud apps, including the Copilot service. If a Conditional Access policy blocks or requires specific conditions for the Copilot service app, users who do not meet those conditions see the error. Common conditions that cause blocks include requiring managed devices, requiring multi-factor authentication, or blocking access from specific geographic locations.

A third, less common cause is a service plan assignment mismatch. If a user has a Copilot license assigned but the service plan is not enabled in the user’s license SKU, the feature appears disabled. This happens when an administrator assigns a license through group-based licensing but does not enable the Copilot service plan in the group policy.

Steps to Re-enable Copilot in the Microsoft 365 Admin Center

1. Sign in to the Microsoft 365 admin center
   Go to admin.microsoft.com and sign in with an account that has Global Administrator or Billing Administrator privileges.
2. Navigate to Org Settings
   In the left navigation pane, select Settings and then Org Settings. This page contains all tenant-wide service toggles.
3. Open the Copilot settings page
   On the Services tab, scroll down to find Microsoft Copilot. Click the entry to open the settings panel.
4. Enable the Copilot toggle
   In the settings panel, locate the switch labeled Allow users to use Copilot. Set it to On. A confirmation dialog may appear; click Save or Confirm to apply the change.
5. Wait for propagation and test
   Policy changes can take up to 30 minutes to propagate. After waiting, ask a user who previously saw the error to restart their Microsoft 365 app and test Copilot again.

Steps to Check and Modify Conditional Access Policies

1. Sign in to the Microsoft Entra admin center
   Go to entra.microsoft.com and sign in with a Global Administrator or Conditional Access Administrator account.
2. Open Conditional Access policies
   In the left menu, expand Protection and select Conditional Access. Then click Policies to view the list of all active policies.
3. Identify policies that target the Copilot service
   Click each policy and review the Cloud apps or actions section. Look for entries that include Microsoft Copilot or Microsoft Copilot Service. Policies that block or require specific conditions for this app can cause the error.
4. Modify or disable the blocking policy
   If a policy blocks access to the Copilot service, you have two options. Option one: set the policy to Report-only mode to test without blocking. Option two: edit the Cloud apps or actions list and remove the Copilot service app. Click Save after making changes.
5. Test with a user who was blocked
   Have the affected user close and reopen their Microsoft 365 app. The error should no longer appear if the policy change was the cause.

Steps to Enable Copilot Service Plan via PowerShell

If the error persists for a specific user despite tenant-wide toggles being enabled, the user’s license may lack the Copilot service plan. Use the following PowerShell method to verify and enable it.

1. Install and connect to Microsoft Graph PowerShell
   Run PowerShell as administrator and execute Install-Module Microsoft.Graph -Scope CurrentUser. Then run Connect-MgGraph -Scopes "User.ReadWrite.All", "Organization.ReadWrite.All" and sign in with a Global Administrator account.
2. Get the user’s current license details
   Run the command Get-MgUserLicenseDetail -UserId "user@domain.com". Review the output to see if the ServicePlans list includes a plan named Microsoft Copilot for Microsoft 365 or similar. If it is missing, the service plan is not enabled.
3. Enable the Copilot service plan
   Use the command Set-MgUserLicense -UserId "user@domain.com" -AddLicenses @{SkuId="SKU-ID-HERE"} -RemoveLicenses @() with the correct SKU ID that includes Copilot. To add only the Copilot service plan to an existing license, use the -LicenseOptions parameter with the DisabledPlans list excluding the Copilot plan. A full example script is available in Microsoft documentation.
4. Verify the change
   Run Get-MgUserLicenseDetail -UserId "user@domain.com" again and confirm the Copilot service plan now appears in the enabled services list.

If Copilot Still Shows the Disabled Error After the Main Fix

Copilot is disabled for specific Microsoft 365 apps only

Some apps like Teams have their own per-app Copilot toggle. In the Teams admin center, go to Teams apps > Manage apps and search for Copilot. Ensure the app is not blocked. Also check Messaging policies to confirm that the Copilot feature is set to On for the user’s assigned policy.

Browser cache or stale token causes the error

If policy changes have been made but a user still sees the error, the user’s cached authentication token may be outdated. Instruct the user to sign out of all Microsoft 365 apps, close the browser, clear browser cache and cookies, and sign back in. For desktop apps, restarting the app after signing out is sufficient.

Licensing grace period or pending activation

New Copilot licenses can take up to 48 hours to fully activate in a tenant. If you assigned a license within the last two days, wait for the activation to complete. Check the Microsoft 365 admin center under Billing > Licenses to confirm the license assignment shows as active.

Item	Tenant-Wide Toggle	Conditional Access Policy
Description	Global on/off switch for Copilot in the Microsoft 365 admin center	Security policy in Microsoft Entra ID that controls cloud app access
Scope	All users in the tenant	Users or groups specified in the policy assignment
Typical error message	“Your organization has disabled this feature”	“Your organization has disabled this feature” or a sign-in block page
Fix location	Microsoft 365 admin center > Settings > Org Settings > Copilot	Microsoft Entra admin center > Protection > Conditional Access > Policies
Propagation time	Up to 30 minutes	Up to 30 minutes

You now know how to identify whether the Copilot disabled error is caused by a tenant-wide toggle, a Conditional Access policy, or a missing service plan. Start by checking the Microsoft 365 admin center toggle because it is the most common cause. If that toggle is already on, move to Conditional Access policies in Microsoft Entra ID. For persistent issues with individual users, use PowerShell to verify the service plan assignment. As an advanced step, consider creating a separate Conditional Access policy that explicitly allows the Copilot service app for a test group of users before rolling out changes tenant-wide.