How Teamwork Graph connector permissions are kept in sync

Once you’ve set up an admin-managed connector, Rovo sets up a secure sync with the third-party app. When new content is created or removed in that app, the relevant information is synced with Rovo.

This means restricted data in your connected third-party apps (for example, a private file or folder in Google Drive) can only be seen and used in Rovo by those users who already have access to that content in such third-party apps.

For supported synced connectors, you can turn on Allow users to see results without connecting their account.

When this setting is on, users may see results in Rovo Search, Chat, and Agents without connecting their account. Access remains controlled by permissions synchronized from the connected app.

Atlassian checks that permission updates from each connected app are received and applied within that connector's freshness window. If those updates are delayed, incomplete, or failing, Rovo hides results from that connector until permissions are back in sync.

Salesforce is different: permissions are validated for each query, so a permission freshness window does not apply.

No action is needed from users. Results return automatically once syncing recovers.

When the setting is off, users must connect their account before they can see results from that connector.

Example scenarios

Included below are some scenarios to help you better understand how Rovo handles permissions and changes: