Set Up Security for the Student Success Chatbot

Decide how you want to manage the chatbot's permissions.

  • Determine Your Approach to Chatbot Security
    When setting up a chatbot in Einstein Bot Builder, always specify a Bot User. Just like a real user, the Bot User has a profile and associated permissions that determine what the chatbot can access and do. Here are the options that you can use to manage the chatbot's access.
  • Assign Chatbot Permissions
    Regardless of what security approach you choose, make sure that the Student Success chatbot and the System Administrator profile have these permissions.

Determine Your Approach to Chatbot Security

When setting up a chatbot in Einstein Bot Builder, always specify a Bot User. Just like a real user, the Bot User has a profile and associated permissions that determine what the chatbot can access and do. Here are the options that you can use to manage the chatbot's access.

Use the Basic Chatbot User and permission set

The Basic Chatbot User is provided as part of the core Einstein Bot functionality and doesn't use a Salesforce user license in your org. You won't see Basic Chatbot User listed on the Users page in Setup, because it's specific to Einstein Bots.

The Basic Chatbot User is assigned the sfdc.chatbot.service.permset permission set. You can't assign any other permission set to it. If you have other bots or create new bots that also use the Basic Chatbot User, keep in mind that they all have access to all of the permissions in sfdc.chatbot.service.permset.

To use the Basic Chatbot User with the Student Success chatbot, update the sfdc.chatbot.service.permset permission set with the required Student Success chatbot permissions.

Assign an existing User as the Bot User and use the person's permissions
This approach lets you use an existing user's permissions and doesn't require you to use a license. The chatbot has the same permissions as the user. Emails sent from the chatbot will appear to be sent from this user.
Create a custom User and use the default permission set or a custom permission set
This approach gives you the most flexibility but requires that you use a Salesforce user license when creating the User record. If you want to create a custom permission set, we recommend that you clone the sfdc.chatbot.service.permset permission set.
Note
Note When creating a new User or using an existing User, we recommend that the user have a Standard user license. The license must provide access to Flows and Tasks.

Assign Chatbot Permissions

Regardless of what security approach you choose, make sure that the Student Success chatbot and the System Administrator profile have these permissions.

  • Object Settings for Tasks

    • Assign Edit permission to the Status field

    • Assign Read permission to the Assigned To, Bot Messaging Remind Date, Bot Messaging Remind Today, and Subject fields

  • Object Settings for Contacts

    • Assign Read and Edit permissions for the object

    • Assign Edit permission to these fields: Bot Messaging Advanced Notice, Bot Messaging End Pause, Bot Messaging Opt-In, Bot Messaging Opt-In Date, Bot Messaging Opt-In Modified By

    • Assign Read permission to the Bot Messaging Allowed field

  • Object Settings for Success Plans

    • Assign Read and Edit permissions for the object

    • Assign Read permission to these fields: Created By, Is Case Student Record, Last Modified By, Open Tasks, Overdue Tasks, Owner, Plan Name, Record Type, Status, Student Contact, and Tasks

    • Assign Edit permission to these fields: Open Tasks, Overdue Tasks, Owner, Plan Name, Record Type, Status, Student Contact, and Tasks

  • System Permissions

    • Select the Access Activities option

    • Select the Run Flows option

For more information about the custom fields that the chatbot installs, see Configure the Student Success Chatbot's Custom Fields.