Self-service data access with Copilot Studio: the agent takes requests, never makes decisions

adnan_hashmi · x · 2026-10-20

Marco Österlin walks through a self-service data product access flow on Microsoft Fabric / Microsoft 365 / Entra ID, combining five pieces: Copilot Studio for the request conversation, SharePoint as the data product register and request log, Power Automate for approvals, Teams Approvals for the owner's decision, and Entra ID security groups to grant access. The same pattern works with Databricks Unity Catalog.

The core design principle: the agent never makes an access decision. It only asks which product the user wants and why; identity comes from the M365 session, and owner/access group are looked up from the register. Responsibilities split four ways — the agent takes requests, the register defines products and owners, the owner approves, Entra ID grants.

Original post →

More from coding & agent

coding & agent channel →