Role-based access control for generative artificial intelligence

A system comprising:

• at least one processor;
• and
• at least one non-transitory computer readable medium storing instructions that, when executed by the at least one processor, cause the at least one processor to perform processing comprising:
• receiving a user prompt from a user;
• determining a user role associated with the user;
• selecting a system prompt associated with the user role and identifying at least one data source from among a plurality of available system prompts, each respective available system prompt being associated with a different respective user role and indicating one or more data sources accessible according to the respective user role such that data sources not indicated in the respective system prompt are inaccessible to the respective user role, the selecting comprising:
• determining a prompt context from data indicating a portion of a user interface through which the user entered the user prompt, and
• selecting the plurality of available system prompts relevant to the prompt context from among a plurality of sets of system prompts relevant to a plurality of respective prompt contexts;
• building a final prompt configured to retrieve data responsive to the user prompt from the at least one data source, the final prompt comprising the system prompt and at least a portion of the user prompt;
• and
• querying a generative artificial intelligence (GenAI) system using the final prompt, the querying causing the GenAI system to access the at least one data source identified by the system prompt and provide a response incorporating data obtained from the at least one data source.

A method comprising:

• receiving, by at least one processor, a user prompt from a user;
• determining, by the at least one processor, a user role associated with the user, the determining comprising:
• extracting a unique user identifier from at least one of a message including the user prompt and an application session in which the user prompt was generated, and
• authenticating the user role as being associated with the unique user identifier with at least one user role data source;
• selecting, by the at least one processor, a system prompt associated with the user role and identifying at least one data source from among a plurality of available system prompts, each respective available system prompt being associated with a different respective user role and indicating one or more data sources accessible according to the respective user role such that data sources not indicated in the respective system prompt are inaccessible to the respective user role, the selecting comprising:
• determining a prompt context from data indicating a portion of a user interface through which the user entered the user prompt,
• selecting the plurality of available system prompts relevant to the prompt context from among a plurality of sets of system prompts relevant to a plurality of respective prompt contexts, and
• retrieving at least a portion of the system prompt from a prompt template database;
• building, by the at least one processor, a final prompt configured to retrieve data responsive to the user prompt from the at least one data source, the final prompt comprising the system prompt and at least a portion of the user prompt;
• and
• querying, by the at least one processor, a generative artificial intelligence (GenAI) system using the final prompt, the querying causing the GenAI system to access the at least one data source identified by the system prompt and provide a response incorporating data obtained from the at least one data source.