Unable to Access Opal Center After Granting Entra Group Permissions

Bilal 80 Reputation points
2026-06-08T11:56:44.11+00:00

Hello everyone,

I wanted to test the Opal Agent and followed the documentation from Oceanleaf Opal Documentation.

I’m currently at the step where I created an Entra ID group, added my Microsoft Copilot user as a member, and granted the group access to use Opal.

However, when I try to log in to the Opal Center for the setup, I receive the following error message:

“Your admin hasn't granted you access to Opal. If you've recently been granted access, try signing in again.”

Has anyone experienced this issue before or knows what could be missing in the configuration?

Thanks in advance for your help!

Microsoft Copilot | Microsoft 365 Copilot | Development
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest

  1. AI answer

    2026-06-08T11:57:02.15+00:00

    The error indicates that the account trying to access Opal is not recognized as having Opal access, even though a group was configured. Focus on verifying group assignment and membership in the places that control Opal access.

    Use these checks:

    1. Confirm Opal is enabled for the correct group in Microsoft 365
      1. A Global administrator must go to the Microsoft 365 admin center.
      2. Navigate to Copilot → Settings.
      3. Locate the user access setting Opal (Frontier).
      4. Verify that the Entra ID security group created for Opal is actually selected here.
      5. If a different group is selected, add the intended group or move the user into the group that is configured.
    2. Verify the user is really in the group that has Opal access
      1. In the Microsoft Entra admin center, go to Entra ID → Groups → All groups.
      2. Open the group that is configured under Opal (Frontier) in the Microsoft 365 admin center.
      3. Select Members and confirm the Copilot user account is listed.
      4. If using a dynamic group, check Dynamic membership rules and ensure the user meets the rule criteria.
    3. Ensure the group owner is also in the group The Opal FAQ notes that if a user sees a "You don't have access" message, it is necessary to:
      • Verify the user is part of the correct security group included in the Microsoft 365 admin center setting.
      • Ensure the owner of the security group is also a member of that group. If the group owner is not a member, add the owner as a member and wait a short period, then sign out and sign back in.
    4. Sign out and sign in again After any change (group membership or Opal (Frontier) setting):
      • Sign out of all Microsoft 365 sessions for that user.
      • Close all browser windows.
      • Open a new private/incognito session and sign back in, then try accessing Opal Center again from the Microsoft 365 Copilot app under Frontier.

    If the message persists, re-check that:

    • The exact group that appears under Opal (Frontier) in the Microsoft 365 admin center is the same group where the user is a member.
    • There are no typos or multiple similarly named groups.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.