Copilot Studio: Secure authenticated user identity in Power Automate flow with shared Smartsheet connection

Question

We are developing a Copilot Studio agent for Microsoft Teams that will eventually support approximately 700 employees. The agent allows employees to submit weekly workload assignments and retrieve their previously submitted workload.

Current configuration:

• Copilot Studio agent using "Authenticate with Microsoft."

Native Copilot Studio workflow for submitting workload.

Power Automate instant cloud flow for retrieving workload, configured with Plan: Copilot Studio.

Smartsheet Premium connector for storing and retrieving workload records.

SharePoint reference lists for employee and project information.

Centrally managed Smartsheet connections.

Security requirement:

Employees must be able to retrieve only their own workload records.

The retrieval flow currently accepts Employee Email as a text input populated through Copilot Studio's "Fill with AI" functionality. Power Automate uses this email address to filter Smartsheet records.

We have added agent instructions restricting access to the signed-in employee's workload, and conversational testing confirms that the agent refuses requests for other employees' information.

However, we want to enforce this restriction technically rather than relying solely on AI instructions.

What we have investigated:

The agent authenticates users through Microsoft.

The current Copilot Studio interface does not expose User.Email in the tool's Custom variable picker.

Office 365 Users — Get my profile (V2) works with end-user authentication as a Copilot Studio connector tool.

When Get my profile (V2) is added inside the Power Automate flow, its configured connection belongs to the flow owner, so it does not independently establish the calling employee's identity.

The Power Automate trigger accepts Employee Email and Week Of but does not expose an authenticated caller identity in its visible input schema.

Questions:

Does the current Copilot Studio experience support passing the authenticated Microsoft Teams user's email or Entra ID identity to an agent-triggered Power Automate flow through a trusted, non-AI-controlled mechanism?

Can Power Automate independently validate that identity before retrieving employee records through a centrally managed Smartsheet connection?

What is Microsoft's recommended architecture for enforcing employee-level authorization without requiring each employee to have an individual Smartsheet connection?

Can we retain our existing Power Automate cloud flow and its Copilot Studio billing plan?

Would this architecture require individual Power Automate Premium or Microsoft 365 Copilot licenses for employees, or can usage be covered through centrally funded Copilot Studio capacity?

Our preference is to preserve the working solution, avoid additional infrastructure where possible, and support approximately 700 employees through centrally managed licensing.

We would appreciate specific configuration guidance and links to current Microsoft documentation. We are developing a Copilot Studio agent for Microsoft Teams that will eventually support approximately 700 employees. The agent allows employees to submit weekly workload assignments and retrieve their previously submitted workload.

Answer 1

The current implementation should not use the AI-populated Employee Email as an authorization boundary. Agent instructions and “Fill with AI” are appropriate for conversational behavior, but access control should be enforced using authenticated identity.

• With Authenticate with Microsoft, Copilot Studio authenticates the Teams user through Microsoft Entra ID. The documented identity variables are User.ID and User.DisplayName; User.Email and User.AccessToken aren't available with this authentication option.
  Ref: https://learn.microsoft.com/en-us/microsoft-copilot-studio/configuration-end-user-authentication#authenticate-with-microsoft
• Therefore, use User.ID as the authoritative user identifier where the agent/flow integration permits it, rather than accepting an email address generated or supplied through the conversation.
• Resolve that authenticated identifier deterministically to the employee record, then apply the employee-level filter before returning Smartsheet data.
• The Smartsheet connection can remain centrally managed. Authentication/authorization of the requesting user should be separated from the service connection used to access the backend.
• Power Automate cloud flows are supported components of Copilot Studio solution architectures, so the existing flow can remain part of the design.
• Power Platform data policies should also be used to require authenticated agents and govern connector usage.
  Ref: https://learn.microsoft.com/en-US/microsoft-copilot-studio/admin-data-loss-prevention

Recommended security model:

Teams user → Entra authentication → Copilot Studio → trusted User.ID → authorization/mapping → Power Automate → centrally managed Smartsheet connection

For licensing, the Microsoft support material explicitly says that Copilot Studio availability and licensing can vary by license, region and organization, and directs customers to the Copilot Studio Licensing Guide for current licensing/billing details.
https://support.microsoft.com/en-us/accessibility/copilot/use-a-screen-reader-to-explore-and-navigate-microsoft-copilot-studio