Hi @Chris Dignan
There are couple of things you need to do.
Enable authentication: https://zcusa.951200.xyz/en-us/microsoft-copilot-studio/advanced-end-user-authentication
This is necessary so that Teams user can authenticate.
While adding scope also add the following: 1. Files.Read.All 2. Sites.Read.All
Make sure you also add the scope back to the copilot's manual authentication. See screenshots below.
Configure SSO for Teams
https://zcusa.951200.xyz/en-us/microsoft-copilot-studio/configure-sso-teams
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.