How to fix a successful sign in but don’t have permission to access reasources

Hi @AP, 

I hope you're doing well today. 

From your description, you are able to sign in successfully; however, you are receiving a message indicating you do not have permission to access the Microsoft resource you are trying to open.  

This type of issue typically occurs due to one of the following reasons: the account has not yet been assigned the appropriate Microsoft 365 license, the organization's security policies require additional verification steps before granting access, or the account is still pending full activation within the system. These are common occurrences in work and school environments and can certainly be addressed with a few targeted steps. 

To help you get back on track, please kindly follow the steps below based on your situation: 

1/ Verify you are signed in with the correct account 

• Go to office.com and click your profile picture in the top-right corner. 
• Select Sign Out, then sign back in using your official work or school email address (e.g., ******@company.com). 
• Ensure you are not accidentally signed in with a personal Microsoft account, as this will not grant access to your organization's resources. 

2/ Check for a Microsoft 365 license assignment 

• Once signed in, go to office.com and navigate to your Account Settings. 
• If you see a message such as "No license found" or "You don't have access," this confirms that a license has not yet been assigned to your account. 
• Please reach out to your IT administrator and request that a Microsoft 365 license be assigned to your account. This is required before any resources can be accessed. 

3/ Meet your organization's device or security requirements 

• Your organization may have Conditional Access policies in place that require your device to be compliant (enrolled in your company's device management system) or that you complete Multi-Factor Authentication (MFA) setup. 
• If you see a message such as "Your organization requires a compliant device" or "Additional verification is needed," please contact your IT team to walk you through enrolling your device or completing MFA registration. 
• You may also try accessing your resources while connected to your company's VPN or internal network, as some policies only allow access from approved networks. 

I hope the information I shared earlier was somewhat helpful in addressing your issue. If you have any further questions or updates, please don’t hesitate to share. I’m always happy to assist further if needed.    

Thank you for your patience and your understanding. I look forward to continuing the conversation. 

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have any extra questions about this answer, please click "Comment".             

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread. 

If you see a message like “sign-in was successful but you don’t have permission to access resources” on Microsoft, it usually means your account is valid but hasn’t been given the right access yet. The simplest fix is to contact your organization’s admin and ask them to assign you the correct role or permissions, because only admins can grant access to resources. If you are the admin, go into the admin portal and check that your account has the proper role. Also, try signing out and back in, or switching to the correct account if you have multiple. In most cases, the issue isn’t with login, it’s just that your account hasn’t been authorized to use that specific service yet.

When sign-in to Microsoft is successful but access to resources is blocked, the account or device usually lacks the required permissions or doesn’t meet organization policies.

For Outlook on the web or other Microsoft 365 resources, use these checks:

1. Confirm the correct account is used
   • Make sure the signed-in account is the work or school account that should have access, not a personal Microsoft account.
   • If multiple accounts exist, sign out and sign back in with the correct one.
2. Check for “Try signing in another way” or “Device is not compliant” messages
   • If a message suggests signing in another way:
     • In Microsoft Edge, choose Switch Microsoft Edge profiles and sign in the browser with the work or school account.
     • Or choose Sign out and sign in with a different account and use an allowed account.
   • If a message says the device is not compliant:
     1. Sign in to Windows using the work or school account (for example, ******@contoso.com).
     2. Connect to the organization’s network (VPN or DirectAccess, if required).
     3. Press Windows logo key + L to lock the device, then unlock it with the same work or school account.
     4. Try accessing Outlook on the web or the internal app again.
3. Verify tenant and directory
   • If the account belongs to multiple Microsoft Entra tenants, ensure the browser is using the tenant that actually has access to the organization’s resources.
   • In Microsoft portals, use the profile menu → Switch directory and select the organization’s directory that should grant access.
4. Confirm permissions with the administrator
   • Even if sign-in works, the account may not be added to the organization’s environment or not assigned the right roles or licenses.
   • Contact the organization’s administrator or helpdesk and ask them to:
     • Confirm the account exists in Microsoft Entra ID.
     • Confirm the account is added to the correct tenant and groups.
     • Confirm the account has the required license and app permissions.
     • Check Conditional Access policies that might be blocking access.
5. If it’s a work or school account compliance issue
   • Follow the guidance for troubleshooting compliance errors for work or school accounts and involve the helpdesk if the problem persists.

If none of these steps resolve the issue, contact the organization’s IT helpdesk or Microsoft Support and provide the exact error message shown after sign-in.

References:

• Troubleshooting compliance error messages for a work or school account
• Problems signing in to a Microsoft application
• Access Microsoft Game Development Kit development resources
• Troubleshoot sign-in issues and account access problems