Management Roles Needed to Access the Chatbot

EmpowerID employs Management Roles to control access to the Chatbot, ensuring that users can only interact with it if they possess the relevant roles. Access to the EmpowerID Chatbot is restricted, emphasizing users' need for appropriate roles to engage with this feature. In EmpowerID, Management Roles play a crucial role by providing users with comprehensive sets of operational capabilities organized into job-based bundles. These bundles serve as efficient mechanisms for bulk resource assignments, aligning with users' roles within the organization.

Understanding Management Roles and Function Prefixes

Management Roles are prefixed by their function in EmpowerID and include the following:

UI – Management Roles prefixed with UI grant users access to specific UI elements in the EmpowerID Web interface.

VIS – Management Roles prefixed with VIS grant users the ability to see or visibility to specific objects in EmpowerID.

ACT – Management Roles prefixed with ACT grant users the ability to manage or perform an action on specific objects in EmpowerID.

Roles Needed to Access the Chatbot

Please follow the instructions on Assigning Management Roles and ensure you have assigned the necessary roles to access the Chatbot. Users must have one or more of the following management role assignments (depending on the required scope) to access the Chatbot.

EmpowerID Chat Bot Access Role Bundle

All the given roles are bundled in a role bundle called EmpowerID Chat Bot Access, and assigning a user with the “EmpowerID Chat Bot Access "role will automatically add all the roles described below.

Management Role	Description

Management Role	Description
ACT-Business-Role-CanUseInAssignments-All	Allows selecting all business roles while creating an access assignment to another resource. It does not permit the management of access assignments for the business role because the assigner would still need access to the resource or role they wish to assign to the business role.
ACT-Location-CanUseInAssignments-All	Allows assigning any location to another resource. The assigner would still need access to the resource or role they wish to assign the location.
ACT-Person-CanUseInAssignments-All	Allows assigning a person while creating an access assignment to another resource. It does not permit the management of access assignments for the person because the assigner would still need access to the resource or role they wish to assign to the person.
ACT-Person-Password-Self-Service	Grants access to change passwords, enroll for a password reset, and other password self-service operations.
ACT-Shared-Credential-Use-All	Grants access to check out all shared users'tials.
UI-Mobile-App-Chat-Full-Access	Grants complete access to UI, workflows, and APIs for mobile apps and Chatbot.
VIS-BusinessRole-All	Grants access to view all business roles.
VIS-Location-All	Grants access to view all Locations.
VIS-Management-Role	Grants the user to view all management roles.
VIS-Mobile-App-API	Grants access to make a call to Mobile App and Chatbot API endpoints/methods.
VIS-Person-All	Grants access to view all people.
VIS-Shared-Credential	Grant access to view all vaulted credentials.