Hello everyone,
I would like to improve the daily tasks of some of my users by providing them a bot integrated in MS teams so they can check some data coming from our CRM.
Of course, i'm able to get a token via an AAD app and the ClientId / Password of the app which have the needed permissions on the CRM Instance.
My point is, going this way means that anyone who have access to my bot will be able to query my CRM and of course i don't want that.
I would like to know if there is a way to know if the user who is talking to my bot is actually a real user of my CRM and then continue the process otherwise I need to "kick" him.
So far i'm understood that the bot has no idea who is talking to him so i have no info to be able to do a simple query to the CRM to check if this guy is registered as a systemuser in my CRM.
Maybe i'm also pointing in the wrong direction.
Any help would be highly appreciated ! :)
Thanks,
Clément