This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(217.60000000000002, 8%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMA%3C/text%3E%3C/svg%3E)
In azure AI Foundry when connecting with the new sharepoint tool to my share point site the ai agent returns "tool_user_error: Error: sharepoint_tool_user_error; Authorization Failed - User does not have valid license.
I have sharepoint license and azure as well as AI foundry subscriptions.
An Azure service that provides an integrated environment for bot development.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(124.80000000000001, 17%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPP%3C/text%3E%3C/svg%3E)
Hi Mohammed Anshif,
The "Authorization Failed - User does not have valid license" error in Azure AI Foundry when connecting to SharePoint usually occurs because the identity being used by the SharePoint tool whether it is a user account, managed identity, or service principal—does not have a valid SharePoint Online license or lacks the necessary Microsoft Graph API permissions, such as Sites.Read.All, with admin consent. Even if your personal account or Azure subscriptions have valid licenses, the connection specifically depends on the identity configured for the tool. To resolve this, first identify which authentication method the AI Foundry tool is using. If it is a user account, verify that a SharePoint Online license is assigned in the Microsoft 365 admin center.
If it is a managed identity or service principal, note that licenses cannot be assigned to these identities, so consider using a dedicated licensed user account instead. Additionally, grant the required Microsoft Graph API permissions and ensure an administrator provides tenant-wide consent. Confirm that the identity has at least read access to the SharePoint site, and then reconnect the SharePoint tool in Azure AI Foundry to refresh authentication. Properly aligning the identity, license, permissions, and access should resolve this authorization error.
For more information: Use the Microsoft SharePoint tool (preview)
How to use the SharePoint tool
Hi Mohammed Anshif,
Did you get any chance to check the response. Thank you!
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(220.8, 82%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENJ%3C/text%3E%3C/svg%3E)
I have the same issue. I have a G5 license assigned to my account. Another developer is able to use the Knowledge tool without any issues.
tool_user_error: Error: sharepoint_tool_user_error; Authorization Failed - User does not have valid license RunId: run_XFZKvG4kaPvh0ElA7XDitWGA
{"name":"thread_2C8GCScqwmEPE0jXfcMqCkDm","context":{"trace_id":"thread_2C8GCScqwmEPE0jXfcMqCkDm","span_id":"thread_2C8GCScqwmEPE0jXfcMqCkDm","thread_id":"thread_2C8GCScqwmEPE0jXfcMqCkDm"},"attributes":{"span_type":"Thread"},"kind":"Thread"}
Error failed:
{"name":"tool_calls","context":{"trace_id":"thread_2C8GCScqwmEPE0jXfcMqCkDm","span_id":"step_6u0buaQB2Mb0OnSuTm9KGp04","thread_id":"thread_2C8GCScqwmEPE0jXfcMqCkDm"},"kind":"RunStep","parent_id":"run_XFZKvG4kaPvh0ElA7XDitWGA","start_time":"2025-08-04T15:25:21.000Z","end_time":"undefined","status":{"status_code":"Error","description":"failed"},"attributes":{"span_type":"RunStep","gen_ai.usage.total_tokens":"908","gen_ai.usage.input_tokens":"892","gen_ai.usage.output_tokens":"16"}}
sharepoint_grounding
{"name":"sharepoint_grounding","context":{"trace_id":"thread_2C8GCScqwmEPE0jXfcMqCkDm","span_id":"call_toyxgT0VYVi19wfHzTPxXGjH","thread_id":"thread_2C8GCScqwmEPE0jXfcMqCkDm"},"kind":"Tool","parent_id":"step_6u0buaQB2Mb0OnSuTm9KGp04","start_time":"2025-08-04T15:25:21.000Z","end_time":"undefined","status":{"status_code":"Error","description":"failed"},"attributes":{"span_type":"Tool","id":"call_toyxgT0VYVi19wfHzTPxXGjH","type":"sharepoint_grounding","sharepoint_grounding":{"input":"search("password management standard")","output":"[redacted]"},"output":""}}
Hi Mohammed Anshif,
Did you get any chance to check the response. Thank you!
Hi Mohammed Anshif,
Just following up to see if you had a chance to review the above response. Thank you!
Hi Mohammed Anshif,
Attached relevant documentation on below pointers as mentioned by Nguyen, Jennifer T (CGI Federal) •
Developers and end users have at least Azure AI User RBAC role. Developers and end users have at least READ access to the SharePoint site.
Hope it helps address the issue
Thank you
I figured out the issue:
Prerequisites:
Developers and end users have Microsoft 365 Copilot license, as required by Microsoft 365 Copilot API.
Developers and end users have at least Azure AI User RBAC role.
Developers and end users have at least READ access to the SharePoint site.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(224.00000000000003, 57.00000000000001%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBN%3C/text%3E%3C/svg%3E)
Do you say that the user should have all those 3 checked in order to connect?