How to Fix Microsoft 365 Document Access and Rights Management Errors
Question details
Users encounter an error stating sign-in succeeded but access criteria are not met when trying to open a Microsoft 365 document.

- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- Attempting to open a restricted or policy-protected document in Microsoft 365.
- Observed behavior
- The document fails to open, displaying a message that access is blocked due to an administrator policy, Information Rights Management (IRM) restriction, or account mismatch despite a successful sign-in.
Ensure you have the exact login credentials associated with the document and verify that your Microsoft 365 subscription is currently active.
Verify Account, Subscription, and Document Permissions
Ensure your account has the appropriate licensing and authorization to bypass Information Rights Management restrictions.
Often, access is denied because the signed-in account does not match the one authorized by the document owner, or the subscription has lapsed.
Log into your Microsoft account online and navigate to Services & subscriptions to verify your Microsoft 365 license is active.
Open any Office app, go to File > Account, and ensure the signed-in email precisely matches the one granted permission for the restricted document.
If the document is protected by Information Rights Management (IRM), ask the owner or IT administrator to explicitly grant your email address access.

Repair Microsoft Office and Update System
Fix underlying software glitches or outdated components that might be triggering false access blocks.
Access via Browser or Alternate Device
Bypass local device policy restrictions by using Office for Web or a different computer.
Try WPS Office for Hassle-Free Document Management
If Microsoft 365 access policies and subscription errors disrupt your workflow, consider switching to WPS Office. It provides a lightweight, highly compatible, and free alternative without complex rights management restrictions holding you back.

Frequently Asked Questions
What does 'sign-in succeeded but does not meet access criteria' mean?
This error means your username and password are correct, but your organization's IT policies, such as Conditional Access or Information Rights Management, are blocking your specific device or account from viewing the file.
Can I open an IRM-protected document without a Microsoft 365 account?
Typically, you need the specific authorized account to open an Information Rights Management protected document. The sender must grant you access, or you can request they send an unprotected copy if organizational policies allow.
Why does my document access fail only on my desktop app but works in the browser?
Desktop apps can be restricted by local device compliance policies set by administrators. If your device isn't registered or updated to meet security criteria, access will be blocked on the app but might still work in the browser.
Where can I find the correlation ID for a Microsoft 365 error?
The correlation ID is typically displayed at the bottom of the error message screen when access is blocked. It is a long string of letters and numbers that helps Microsoft Support diagnose the exact server-side issue.




