Call a flow from Copilot is giving warning message, what is it exactly?

(0) Share

Report

Posted on by johnjohnPter

1,811 Super User 2024 Season 1

I have a copilot agent created using copilot studio. The copilot agent's "Conversational boosting" stage, calls a flow inside power automate, where it passes a parameter and retrieve a message, as follow:-

The flow has this settings inside the "Run only users":-

But when i want to publish the Agent, i got this message:-

so what it is trying to say? now as i know that the power automate flow, that get called from Copilot will run under the user who is using a copilot agent, and not using the creator/author of the flow credentials , am i correct?

Categories:

Building flows

I have the same question (0)

All responses (3)

Answers (0)

Suggested answer

David_MA 12,982 Super User 2025 Season 2 on at

Like (0)

Report

When you publish a Copilot agent and receive a warning that the agent runs actions on the author's credentials, it means that the actions configured to run with the author's credentials will have access to the content that the author has access to, rather than the access that the user running the flow has. If the data being accessed with that action is highly sensitive and should not be accessed by users running the flow, you may need to adjust your flow accordingly. This is a decision you need to make based on the sensitivity of the data. The workflow is simply warning you so you can make an informed decision. In other words, the agent you are building could potentially surface data to users that other users should not have access to.

Was this reply helpful? Yes No
johnjohnPter 1,811 Super User 2024 Season 1 on at

Like (0)

Report

@David_MA

Ok understood, but why would this happen? I mean does this applies to the flow:-

1) Let say, User A create a copilot agent, and create a flow that get data from Sharepoint & Dataverse.

2) User B access the same copilot created by user A, run the copilot, and the copilot run the flows,

3) then he flows must be called using UserB credentials ,, and not userA credentials? am i correct?.. so for example if a document is only shared with userA, then userB can not view it or get info about it from the flows that runs under copilot??.. this is the idea of "Provided by Run-Only User"?

am i missing something?

Was this reply helpful? Yes No
David_MA 12,982 Super User 2025 Season 2 on at

Like (0)

Report

I can only answer from a workflow perspective, as I have not created any agents yet. Based on the message, there are actions in the flow that run on the flow owner's credentials. That is all the warning is telling you. You need to determine if whatever is configured in the bot that uses your credentials is okay for anyone who uses it to see. If not, you need to update the action to run on the credentials of the user instead.

You may want to post your question in the Copilot Studio forum instead of the Power Automate forum and someone may be able to explain this better as it relates to Copilot agents. That forum is located at Microsoft Power Platform Community Forum Thread.

Was this reply helpful? Yes No