Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Resources

With the addition of Multi-bot capabilities, we now propose access controls to be available for each bot that is configured. Providing access control at the bot level gives admins flexibility to restrict certain LLMs to certain groups of users or specified channels.

User access controls

By default, a bot has no restrictions placed on it. User access is set to ‘Allow all users’ and channel content access is set to ‘All all channel content’

...

Allowing only selected users

...

Bot roles

The way we’re thinking about access controls is that each bot can play different ‘roles’:

Channel-based assistance: Bots can use the context of a channel they’re allowed to access and provide expert assistance on that channel to end users. Admins can enable or disable this role for each bot.

Personal assistance: The bot can look across only messages the user has access to, in order to provide assistance or answers to questions from sources across the workspace. The bot will only share those answers personally with that user and no one else. Admins can enable or disable this role for each bot.

...

Defaults

By default, both of these ‘roles’ are enabled and ‘allow all’ is the default selection for access options.

...

Channel-based assistance: access options

If ‘channel-based assistance’ is enabled, admins can decide which channels the bot (and its associated LLM) has access to. They can choose to allow for all channels, allow for selected channels, or block selected channels.

Allow access to all channels (default)

Allow for all channels is the initial default when a bot is created.

...

Allowing for specific channels

When the Allow for specific channels radio button is selected, a text area is revealed below where admins can enter and select individual userschannels, LDAP groups, or entire Teams.

NOTE: custom users groups are currently not allowed since there are not permission controls on user groups right now.

image-20240708-195824.pngImage Removed

...

When you click in the field and start typing, an autocomplete menu displays with options that narrow down as you type. This menu includes individual users, groups and Teams.

...

When users are selected, chips are an item is selected from the autocomplete list, a chip is added to the fieldtext area.

...

Chips can be removed by clicking the x icon on the right side of the chip.

...

Blocking access to content from selected channels

When the Block selected usersbot access to content in specific channels radio button is selected, a text area is revealed below where admins can enter and select individual users, custom user groups, LDAP groups, channels or entire Teams.

...

This field behaves the same as the allow text area above with the autocomplete and chip interactions.

...

Personal assistance: access

...

options

If ‘personal assistance’ is enabled for a bot, admins can also decide which users can have access. They can choose to allow access to all channelsusers, allow access to specified channelsselected users, or block access to specified channelsselected users.

Allow

...

for all

...

users (default)

...

Allowing

...

only selected users

When the Allow bot to access content in specific channelsselected users radio button is selected, a text area is revealed textarea reveals below where admins can enter and select individual channelsusers, LDAP groups, or entire Teams.

NOTE: custom users groups are currently not allowed since there are not permission controls on user groups right now.

...

When you click users start typing in the text field and start typing, an the autocomplete menu displays with options that and narrow down as you type.

...

When an item is selected from the autocomplete list, a chip is added to the text area.

...

Blocking access to content from selected channels

When the Block bot access to content in specific channels This menu includes individual users, groups and Teams. This behavior is much the same as the channel access options above.

...

When users are selected, chips are added to the field.

...

Chips can be removed by clicking the x icon on the right side of the chip.

Blocking selected users

When the Block selected users radio button is selected, a text area is revealed below where admins can enter and select individual channels users, custom user groups, LDAP groups, or entire Teams.

...

This field behaves the same as the allow text area above with the autocomplete and chip interactions.

...

Channel assistance for end users

coming soon…

Users who

...

have not

...

been given access to a bot’s personal assitance

When users do not have access to is blocked from accessing a specific botbot’s personal assistance capability, it will not be available to for them to select from the various dropdowns throughout the UI (e.g. RHS, thread summarization, channel summarization).

If there is only one bot left that they have access to, the bot dropdown is no longer visible at all and bots cannot be changed.

...

In addition, for users who have been restricted from using any bots, the sparkle menu button in the post menu and new message line are not visible.

Channels where

...

channel-based assistance is not allowed

  • In channels where bots do not have access, that bot will not be selectable from the summarization menus

  • If a user has access to bots, but a channel has no bot access, then the sparkle button menus will appear empty with a notice that this channel doesn’t have access to use AI tools.

...