Data Security in Custom AI Agent

Summary: Data Security issue with Custom AI Agents

Content (please ensure you mask any confidential information):

We have Create a Custom AI Agent that retries the personal information of users. We have created a custom AI role and assigned it to the Custom AI Agent.

We have added this new custom role to the employee and Line Managers.

in Employee Login: user asks the DOB of other employee. the Agent says no Access.

in Manager Login: user asks the DOB of other employee. the Agent is showing the DOB value.

do we need to control this in the prompts. or do need to add the custom role as a inherited role into Line manager role.?