---
schema_version: "1"
id: 62dbab8221b560be9a17db162a3c40d15b47526970907b27be643c728749914c
title: Set Up Security for the Student Success Chatbot
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/sfdo/264-0-0/ssh_setup_chatbot_security.md
canonical_url: https://help.salesforce.com/s/articleView?id=sfdo.ssh_setup_chatbot_security.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: be3c2b164d33c46e98f4d08c0c19eff372697cdc19f4b604739809b5d01e772a
description: Decide how you want to manage the chatbot's permissions.
products:
  - Nonprofit
  - Education
release: "264"
---
# Set Up Security for the Student Success Chatbot

Decide how you want to manage the chatbot's permissions.

- **[Determine Your Approach to Chatbot Security](https://help.salesforce.com/s/articleView?id=sfdo.ssh_setup_chatbot_security.htm&release=264.0.0&type=5)**  
    When setting up a chatbot in Einstein Bot Builder, always specify a Bot User. Just like a real user, the Bot User has a profile and associated permissions that determine what the chatbot can access and do. Here are the options that you can use to manage the chatbot's access.
- **[Assign Chatbot Permissions](https://help.salesforce.com/s/articleView?id=sfdo.ssh_setup_chatbot_security.htm&release=264.0.0&type=5)**  
    Regardless of what security approach you choose, make sure that the Student Success chatbot and the System Administrator profile have these permissions.

## Determine Your Approach to Chatbot Security

When setting up a chatbot in Einstein Bot Builder, always specify a Bot User. Just like a real user, the Bot User has a profile and associated permissions that determine what the chatbot can access and do. Here are the options that you can use to manage the chatbot's access.

Use the Basic Chatbot User and permission set

The Basic Chatbot User is provided as part of the core Einstein Bot functionality and doesn't use a Salesforce user license in your org. You won't see Basic Chatbot User listed on the Users page in Setup, because it's specific to Einstein Bots.

The Basic Chatbot User is assigned the sfdc.chatbot.service.permset permission set. You can't assign any other permission set to it. If you have other bots or create new bots that also use the Basic Chatbot User, keep in mind that they all have access to all of the permissions in sfdc.chatbot.service.permset.

To use the Basic Chatbot User with the Student Success chatbot, update the sfdc.chatbot.service.permset permission set with the [required Student Success chatbot permissions](https://help.salesforce.com/s/articleView?id=sfdo.ssh_setup_chatbot_security.htm&release=264.0.0&type=5 "Decide how you want to manage the chatbot's permissions.").

Assign an existing User as the Bot User and use the person's permissions

This approach lets you use an existing user's permissions and doesn't require you to use a license. The chatbot has the same permissions as the user. Emails sent from the chatbot will appear to be sent from this user.

Create a custom User and use the default permission set or a custom permission set

This approach gives you the most flexibility but requires that you use a Salesforce user license when creating the User record. If you want to create a custom permission set, we recommend that you clone the sfdc.chatbot.service.permset permission set.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-sfdo-student_success_hub-264-0-0-production-enus/b7ac11a0-381d-499e-afd5-05e856602032/images/icon_note.png)

Note When creating a new User or using an existing User, we recommend that the user have a Standard user license. The license must provide access to Flows and Tasks.

## Assign Chatbot Permissions

Regardless of what security approach you choose, make sure that the Student Success chatbot and the System Administrator profile have these permissions.

- Object Settings for Tasks
    
    - Assign Edit permission to the Status field
    - Assign Read permission to the Assigned To, Bot Messaging Remind Date, Bot Messaging Remind Today, and Subject fields
- Object Settings for Contacts
    
    - Assign Read and Edit permissions for the object
    - Assign Edit permission to these fields: Bot Messaging Advanced Notice, Bot Messaging End Pause, Bot Messaging Opt-In, Bot Messaging Opt-In Date, Bot Messaging Opt-In Modified By
    - Assign Read permission to the Bot Messaging Allowed field
- Object Settings for Success Plans
    
    - Assign Read and Edit permissions for the object
    - Assign Read permission to these fields: Created By, Is Case Student Record, Last Modified By, Open Tasks, Overdue Tasks, Owner, Plan Name, Record Type, Status, Student Contact, and Tasks
    - Assign Edit permission to these fields: Open Tasks, Overdue Tasks, Owner, Plan Name, Record Type, Status, Student Contact, and Tasks
- System Permissions
    
    - Select the **Access Activities** option
    - Select the **Run Flows** option

For more information about the custom fields that the chatbot installs, see [Configure the Student Success Chatbot's Custom Fields](https://help.salesforce.com/s/articleView?id=sfdo.ssh_setup_chatbot_custom_fields.htm&release=264.0.0&type=5 "Configure the chatbot's custom fields on the Contact and Activity objects.").