web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

Community site session details

Community site session details

Session Id :
Power Platform Community / Forums / Copilot Studio / Access to External Use...
Copilot Studio
Answered

Access to External Users for PVA BOT

(0) ShareShare
ReportReport
Posted on by 25

Hi, I've made Authentication to Manual (AAD v2) and checked the Require users to sign in checkbox under Access. Is there any way I can provide access to external users without changing Access and Authentication Settings of my PVA Bot. I'm hoping there might be someway to configure external users in AD to have access to my Bot. I can't find any solid documentation from Microsoft regarding this. Can anyone help me to find a way if there is one.

Categories:
I have the same question (0)
  • Jcook Profile Picture
    7,781 Most Valuable Professional on at

    Hello @sarathutla 

     

    Where is the bot published?

     

    Is this bot using the full PVA license or inside Microsoft Teams?


    From what I remember guest access when built inside teams is not supported.

    If this bot is published outside of teams, you can try having the external user setup with a guest account, I have not tried this though.

     

    **Edit - Adding docs for adding guest users to AD **

    https://docs.microsoft.com/en-us/azure/active-directory/external-identities/b2b-quickstart-add-guest-users-portal#prerequisites

  • PS Profile Picture
    27 on at

    Hi @sarathutla 

     

    Thanks for reaching out!

    Your requirement look very similar to this thread here https://powerusers.microsoft.com/t5/General/How-to-get-PVA-to-authenticate-user-in-portal/m-p/420988#M1289

    Only difference might be that you're not using dataverse which wouldn't impact the guest user concept.

    Give it a try and let us know.

    Thanks!

  • sarathutla Profile Picture
    25 on at

    I've published the Bot to Demo Website and I'm using full PVA license.

    I've added a guest user in AAD and tried accessing the bot with that user account. But it's not working and saying "Sorry, you don't have access to talk to the bot."

     

    Below is my Access and Authentication configuration in PVA

     

    Access.PNG

    Authentication.PNG

    Guest.PNG

  • Jcook Profile Picture
    7,781 Most Valuable Professional on at

    Hi @sarathutla 

     

    So I did find this doc, that does state that Guest access to a bot on an external site is possible:

    https://docs.microsoft.com/en-us/power-virtual-agents/configuration-security#guest-and-external-access-users

     

    Could you try to change the user from Guest to Member in Azure AD:

    Jcook_0-1614670942338.png

     

  • sarathutla Profile Picture
    25 on at

    Thank You for your response!

    My requirement is - How Guest Users can access my PVA Bot if below are my Access and Authentication settings. 

     

     

    Access.PNGAuthentication.PNG

     

    I've tried adding guest user to AAD but no luck. Is it possible to configure guest users so that they can access my bot.

  • sarathutla Profile Picture
    25 on at

    I've tried changing the user type to Member. Still no luck😥.

    And the documentation is not detailed as well.

  • Jcook Profile Picture
    7,781 Most Valuable Professional on at

    Hi @sarathutla 

     

    So since you're using the AAD V2 Auth.

     

    Have you set up an Azure App Registration?

    Can you confirm that your settings are following the docs:

    Configure single sign-on - Power Virtual Agents | Microsoft Docs

  • sarathutla Profile Picture
    25 on at

    Yes @Jcook , I did register my app in AAD by following https://docs.microsoft.com/en-us/power-virtual-agents/configuration-end-user-authentication#configure-authentication-with-manual-azure-ad

     

    I've no issues with the user accounts in my organization (member accounts). The problem is only for the guest users in my organization.

  • Jcook Profile Picture
    7,781 Most Valuable Professional on at

    Hey @sarathutla 

     

    Can you confirm in the App Registration the user access looks like from the docs I have sent:

    https://docs.microsoft.com/en-us/power-virtual-agents/configure-sso#configure-single-sign-on

    the docs you sent, don’t go in detail for the app registration. The one I have shared goes in depth on the settings. Please confirm your app registration settings are following that of the docs here:

    https://docs.microsoft.com/en-us/power-virtual-agents/configure-sso#configure-single-sign-on

  • sarathutla Profile Picture
    25 on at

    Hi @Jcook , The document you've shared is for configuring SSO. Currently I don't want to enable SSO as I've published the Bot to a Demo Website.

     

    I believe configuring SSO is not mandatory for Guest Users to have access to Bot. Please correct me if I'm wrong.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Forum hierarchy changes are complete!

In our never-ending quest to improve we are simplifying the forum hierarchy…

Kudos to our 2025 Community Spotlight Honorees

Congratulations to our 2025 community superstars!

Leaderboard > Copilot Studio

#1
Valantis Profile Picture

Valantis 545

#2
chiaraalina Profile Picture

chiaraalina 150

#3
Michael E. Gernaey Profile Picture

Michael E. Gernaey 112 Super User 2025 Season 2

Last 30 days Overall leaderboard