| Table of Contents | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Prerequisites
The user performing the steps described in this guide needs to be the owner of the Enterprise Application/App Registration that is used by Ayfie Personal Assistant
Which Enterprise Application is in use by Ayfie Personal Assistant?
If one is you are unsure about which Enterprise Application /or App Registration that is used by the Ayfie Personal Assistant Applicationapplication, follow these steps
Retrieve the Client ID/Name from the Deployment Output
:
Open the Managed Application
...
for Ayfie Personal Assistant Application.
Navigate to Settings and select Parameters and outputs.
Copy the ClientID listed there.
...
Adding Required App Registration Role
...
Go to https://portal.azure.com and navigate to “App Registrations”
...
Look up the App Registration with the ClientId or name
...
Navigate to “App roles” within “Manage” on the left side
...
Click “Create app role”
Enter the following
...
Permissions
We have three types of roles in our application:
personal_assistant.adminpersonal_assistant.branding_managerpersonal_assistant.chatbot_manager
These roles need to be added to the App Registration to control access to specific functionalities within Ayfie Personal Assistant.
Steps to Add App Roles
Sign in to the Azure Portal with appropriate administrative privileges.
Navigate to Azure Active Directory > App Registrations.
Search for the App Registration using the ClientID or name obtained earlier.
Select the App Registration from the search results.
In the left-hand menu under Manage, select App roles.
Click on Create app role to add a new role.
Repeat the following steps for each of the three roles (add each role by clicking Apply):
a. For
personal_assistant.adminDisplay name:
personal_assistant.adminAllowed member types:
Users/GroupsValue:
personal_assistant.admin
Description:
Admin role with full access to Ayfie Personal Assistant functionalities.Do you want to enable this app role?:
Yes
b. For
personal_assistant.branding_managerDisplay name:
personal_assistant.branding_managerAllowed member types:
Users/GroupsValue:
personal_assistant.branding_managerDescription:
Role to manage custom branding in Ayfie Personal
Assistant.Do you want to enable this app role?
Select “Apply”
Verify the new entry in the list within “App roles”
...
Add User Role Assignment
Go to https://portal.azure.com and navigate to “Enterprise Applications”
Look up the Enterprise Application with the ClientId or name (same as above)
Navigate to “Users and Groups” within “Manage” on the left side
If no users are added, add the user(s) that should be assigned the new role
Check the checkbox in front of the person and click “Edit assignemnt”
Click “None Selected” under “Select a role”
Select the role “personal_assistant.admin” and hit the button “Select”
...
:
Yes
c. For
personal_assistant.chatbot_managerDisplay name:
personal_assistant.chatbot_managerAllowed member types:
Users/GroupsValue:
personal_assistant.chatbot_managerDescription:
Role to manage chatbots in Ayfie Personal Assistant.Do you want to enable this app role?:
Yes
Verify that the new roles are listed in the App roles section.
...
Assigning Roles to Users or Groups
Now that the roles are created, you need to assign them to users or groups who require access to specific functionalities.
Steps to Assign Roles
Navigate back to the Azure Portal and go to Azure Active Directory > Enterprise Applications.
Search for the Enterprise Application using the ClientID or name.
Select the Enterprise Application from the search results.
In the left-hand menu under Manage, select Users and groups.
Click on Add user/group.
In the Add Assignment pane:
Click on Users and groups.
Select the user(s) or group(s) you want to assign a role to.
Click Select.
After selecting users or groups, click on Select a role.
Choose the appropriate role for the user or group:
For full administrative access, select
personal_assistant.adminTo manage custom branding, select
personal_assistant.branding_managerTo manage chatbots, select
personal_assistant.chatbot_manager
Click Assign to apply the role to the selected user(s) or group(s).
Repeat these steps for any additional users or groups as needed.