Blog Post

Microsoft Foundry Blog
7 MIN READ

Building Permission-Aware Hosted Agents for SharePoint in Foundry Agent Service

heenarefai's avatar
heenarefai
Icon for Microsoft rankMicrosoft
Oct 12, 2026

This article shows how to build hosted agents in Foundry Agent Service, published to Microsoft teams that retrieve SharePoint content on behalf of each signed-in user, using a Foundry IQ knowledge base and the Foundry toolbox, so every answer reflects what each person is allowed to see.

Organizations increasingly publish agents to Microsoft Teams and Microsoft 365 Copilot that answer questions using internal knowledge sources. SharePoint is a very common source for this information;...
Updated Oct 13, 2026
Version 2.0
ai agents
azure ai search
foundry agent service
foundry tools
microsoft foundry sdk
symoiz's avatar
symoiz
Brass Contributor
Oct 12, 2026

Permission-aware retrieval is essential when deploying AI agents over enterprise knowledge. Preserving SharePoint permissions throughout retrieval and response generation can help prevent unauthorized information exposure. I’d be interested in how permission changes and document-level access revocation are handled in real time.

heenarefai's avatar
heenarefai
Icon for Microsoft rankMicrosoft
Oct 13, 2026

Great question. This pattern retrieves SharePoint content live at query time through the Copilot Retrieval API, using the signed-in user’s identity. It does not copy documents into a separate index, so document and permission changes are evaluated by SharePoint during subsequent retrieval requests.

In practice, after access is revoked, the affected user should no longer receive that document in new grounded responses once the change has propagated through Microsoft 365.