Roles and Authorizations for Joule with Microsoft 365 Copilot in Microsoft Teams - fraukebecker/tcloc-team-navigators GitHub Wiki
Roles and Authorizations for Joule with Microsoft 365 Copilot in Microsoft Teams
Target users: SAP users
Overview
This explains how your existing SAP permissions automatically work when using Joule through Microsoft Teams or Copilot. You don't need to do anything - the system uses your current access rights to keep your data secure across both platforms.
How Your Access Works
Your access rights are the same whether you use Joule directly or through Microsoft 365 Copilot/Microsoft Teams. The system automatically checks your identity and permissions, ensuring you can only see and ask about data you are already authorized to access in SAP systems.
This works through a trust setup that links user identities across Microsoft Entra ID and SAP Cloud Identity Services (IAS), as described in Integrating Joule with Microsoft 365 Copilot. For more information, see User Administration and Authentication.
In practice, this means every question you ask Joule via Copilot or Teams is processed under your user profile. You will only receive answers if you are a known and authorized Joule user.
[!NOTE] There are no additional roles to be maintained for this integration. Your existing permissions are used.
[!IMPORTANT]
Data and Security
For detailed information on data, privacy, and security for Microsoft 365 Copilot, see: Data, Privacy, and Security for Microsoft 365 Copilot