Has anyone successfully implemented ServiceNow RBAC with Copilot Studio?
Hey, I'm trying to set up ServiceNow KB articles as a knowledge source in Copilot Studio, but I want the access to be governed by RBAC, so that a user only gets results from the documents/articles they're actually authorized to see.
Setup:
Copilot Studio agent using the ServiceNow connector to pull Knowledge Base articles
KB articles in ServiceNow already have role-based/user-criteria restrictions configured
What I'm trying to achieve:
When the agent searches or retrieves KB articles, I want the results to respect the requesting user's access level in ServiceNow, not return everything regardless of who's asking. Essentially: user asks a question, agent only surfaces articles that user has permission to view.
Questions:
Has anyone actually gotten this working end-to-end? What did the setup look like?
Does the ServiceNow connector pass through the end user's identity, or does it always run under a service account (in which case RBAC wouldn't naturally apply)?
If it's a service account, how did you enforce the restriction — filtering in Copilot Studio itself, or some pass-through auth (SSO/OAuth on-behalf-of) so ServiceNow applies its own RBAC at query time?
Would really appreciate hearing from anyone who's solved this, especially if you were dealing with sensitive KB content (HR, compliance, security) where RBAC actually mattered.