It would be good if the chatbot can look up user account information, but will need a way to pass through a session token through the chatbot to the underlying function, that way the chatbot can make authenticated function calls on behalf of the user.