Security & Control Module Overview

In the Security & Control module of the Kore.ai Bots Admin Console,

• configure Single Sign-On (SSO) authentication for your domain users (see here),
• configure and install the Kore.ai Connector agent for Bot communications between Kore.ai and your on-premises applications using custom Kore.ai Bots (see here),
• obtain and reset the enterprise key for encryption (see below),
• create the app and define API scopes (see below),
• enable Two-Factor Authentication to provide an additional layer of security for your account (see here),
• other security settings (see here).

API Scopes

Using this option you can define apps and associate API scopes for accessing various platform features.

1. Use the New button to create a new app.
2. Select the +Create App option from the App drop-down.
3. Once you enter a name, a Client ID and Client Secret are generated, which can be used to access the platform
4. For each app created the following API Scopes can be assigned as per the requirement
   • IntentIdentification includes the scopes for Intent and Entity Detection;
   • Bot Definition includes the scopes for Bot Import, Export, and Creation;
   • Bot Publish for Publish access;
   • Test & Train to include permissions to Train ML  and FAQ, Utterances Import & Export;
   • Logs to include retrieval capability of Bot Audit and Admin Console Audit Logs;
   • Profile Management to get access to Role Management APIs and to Delete User Data;
   • Bot Analytics to be able to retrieve Chat History and Bot conversation Sessions
   • User Management scope to manage users;
   • Custom Reports scope to retrieve the data associated with custom widgets and reports;
   • ManageKnowledgeGraph scope to export and manage the complete definition of the Knowledge Graph;
   • Channel Management to create and update channels;
   • BotKit to configure the botkit and agent transfer;
   • Master Admin – assign this scope to get the list of sample bots.
5. Once created these apps can be used from within the Bot Builder Platform or externally to access various features by invoking the corresponding public API (see here for list).