In Access look at the Monitor - Reports - Audit Events. Make sure the user has the right Domain Name. If you see the onmicrosoft.com instead of your actual domain then the user email adres or UPN in Azure AD is wrong.

It also can be a misconfiguration Access Policy.