
Hi all,
I have a SharePoint folder that is restricted to specific team members, and I’m one of the members with access. I created an agent using Copilot Studio and added this SharePoint folder as a knowledge data source. When I test the bot inside Copilot Studio, it retrieves results perfectly.
My question is: after I publish the bot, how does data access work for end users?
If another user (who does not have access to that SharePoint folder) asks a question related to the documents inside it, will the bot still fetch answers using my SharePoint permissions in the backend, or will it respect the user’s permissions and block access?
Basically, does the published bot use the creator’s SharePoint access, or does it enforce the data security of the end user?