Dashworks automatically respects document-level permissions from app connections. Here's how it determines which app connections to use for search permissions:
Surface
Permissions
Web app when no bot is tagged
Default behavior of using the permissions of the app connections for the user who is asking the question
Web app when a bot is tagged with "@Bot"
Permissions of the app connections for the Bot
Slackbot in DMs
Default behavior of using the permissions of the app connections for the user who is asking the question