Restrict Data to users in Agent Builder or Generative AI

Thank you for your response!

I’m working with a scenario where an external website (similar to SAP SuccessFactors) has its own user authentication system. A chatbot is integrated into a section of this website, and some of the chatbot’s knowledge comes from documents stored in a separate datastore.

I’m trying to understand the underlying mechanism of how this works.

My current approach is to capture the username from the external website’s login process. This username would then be used in conjunction with an unauthenticated API, from a conversational interface, to match the user with the data that can be accessed by them. The user-specific access permissions and information, will be available in a BigQuery table which includes usernames, and the information each user is authorized to access.