With the addition of Multi-bot capabilities, we now propose access controls to be available for each bot that is configured. Providing access control at the bot level gives admins flexibility to restrict certain LLMs to certain groups of users or specified channels.
User access controls
By default, a bot has no restrictions placed on it. User access is set to ‘Allow all users’ and channel content access is set to ‘All all channel content’
Allowing only selected users
When the Allow selected users radio button is selected, a textarea reveals below where admins can enter and select individual users, LDAP groups, or entire Teams.
NOTE: custom users groups are currently not allowed since there are not permission controls on user groups right now.
When users start typing in the text field, the autocomplete menu displays and narrow down as you type. This menu includes individual users, groups and Teams.
When users are selected, chips are added to the field.
Chips can be removed by clicking the x icon on the right side of the chip.
Blocking selected users
When the Block selected users radio button is selected, a text area is revealed below where admins can enter and select individual users, custom user groups, LDAP groups, or entire Teams.
This field behaves the same as the allow text area above with the autocomplete and chip interactions.
Channel access controls
Channel access can be configured similarly to user access. Admins can choose to allow access to all channels, allow access to specified channels, or block access to specified channels.
Allow access to all channels (default)
Allowing access to content from selected channels
When the Allow bot to access content in specific channels radio button is selected, a text area is revealed below where admins can enter and select individual channels, or entire Teams.
When you click in the field and start typing, an autocomplete menu displays with options that narrow down as you type.
When an item is selected from the autocomplete list, a chip is added to the text area.
Blocking access to content from selected channels
When the Block bot access to content in specific channels radio button is selected, a text area is revealed below where admins can enter and select individual channels or entire Teams.
This field behaves the same as the allow text area above with the autocomplete and chip interactions.
Users who do not have access
When users do not have access to a specific bot, it will not be available to them to select from the various dropdowns throughout the UI.
If there is only one bot left that they have access to, the bot dropdown is no longer visible and bots cannot be changed.
If a user has been restricted from using all bots, AI tools are not available to them anywhere. If they attempt to open the Copilot RHS, they will get a notice that access to Copilot has not been granted to them.
In addition, for users who have been restricted from using any bots, the sparkle menu button in the post menu and new message line are not visible.
Channels where bots do not have access
In channels where bots do not have access, that bot will not be selectable from the summarization menus
If a user has access to bots, but a channel has no bot access, then the sparkle button menus will appear empty with a notice that this channel doesn’t have access to use AI tools.
