As per my knowledge also, you should first have the required access/role in order to access any information from the backend. We have virtual agent nowassist who searches and gives you the required information. But that user has all the required access to go and read the backend info.

Hope it helps.