BeeKeeper AI

DataBee leverages advanced generative AI-powered chatbot, BeeKeeper AI, to tackle the critical challenge of identifying and validating asset owners within your organization. By automating the process of reaching out to potential asset owners and verifying their information, Beekeeper reduces gaps in IT operations, security, and compliance, allowing your teams to focus on high-value tasks.

DataBee makes predictions about who may own an unclaimed asset relying on historical user behaviors correlated to the asset and other contextual data. BeeKeeper automatically reaches out to these potential owners using your organization's chat platform (today only Microsoft Teams is supported) without requiring any manual intervention. This intelligent, conversational approach ensures assets are appropriately attributed, enhancing both data hygiene and operational accountability.

This article provides detailed guidance on configuring, deploying, and managing BeeKeeper, empowering your organization to streamline asset ownership validation seamlessly.

BeeKeeper App Setup in Azure portal

This guide will help you set up a Beekeeper as an MS Teams Application.

Step 1: Set up the Azure application

• Go to Azure portal and search for App registrations.

  

• Click on App registrations and then click on New registration

  

• Enter the name you want to give to the application and in the ‘Redirect URI’ section, select Web platform and add https://buzzbot.databee.buzz/response-oidc as the value in the text box. Click on Register.

  

• Once the app registration is created, go to Expose an API and under ‘Scopes defined by this API’ click on Add a scope.

• The "Add a scope" page pops up. Give the ‘scope name’, select ‘who can consent’ (Admin and users or Admins only), add the ‘Admin consent display name’ and ‘Admin consent description’. The rest of the fields are not mandatory. Select Add scope.

  

• Now go to API permissions and add all the necessary permissions. Some permissions may require Admin consent.

• To add the permissions, click on Add a permission and then select Microsoft Graph.

  

• Now select Delegated Permissions.

  

• Search for the permissions mentioned below and select them.

  • profile: allows access to the user’s profile information.

  • openid: enables OpenID Connect authentication.

  • email: grants access to the user’s primary email address.

  • User.Read: provides the ability to read the signed-in user's profile.

  • User.Read.All: allows reading of all user profiles in the organization.

  • Chat.Create: allows the chatbot to create new chat threads.

  • Chat.ReadWrite: grants the ability to read and write to chat threads.

• To add the exposed API as a permission, again click on Add a permission and then select APIs my organization uses. Search for the application name here and click on the API to add it.

  

• Click on Grant admin consent for (your organization name) to grant admin consent to the permissions.

• Once all the permissions are selected click on Add Permissions.

  

Step 2: Create a Client Secret

• Create a new client secret by going to Certificates & Secrets tab and select New client secret.

  

• Go to Entra ID and then create a new service user and assign a Microsoft Teams license to it.

  

• Now add service account to the application. In the Beekeeper enterprise application, go to Users and groups tab and add the service account and the accounts that you would want to have access to this application. You may also want to add an individual administrator's personal account as well.

  

Step 3: Add Service account (Optional)

• Add the service account as the owner of the App registration.

  

Step 4: Change service account image

• To change the service account’s image, go to Entra ID, search for the service account’s name.

  

• In the overview section of the service account page, click on the Camera button located on the account’s profile picture and upload an image file to change the image of the service account.

  

BeeKeeper Setup in the DataBee UI

Once you log in to the DataBee UI, click on the Configuration icon at the top right side, and then select System. From the left side bar, select BeeKeeper. To configure the BeeKeeper service, fill in the fields below.

• Enable Ask an Owner: check this box to activate the Ask an Owner service. By default, this feature is disabled.

• Maximum Number of Concurrent Conversations: set the maximum number of conversations that can be initiated concurrently. The default value is set to 100.

• Frequency of Conversations: choose how often a user can contact the same asset owner- options are daily, weekly, or monthly. The default frequency is set to daily.

  

• Max Number of Contacts with a User for a Single Device: specify the maximum number of contact attempts with a potential asset owner for a single device. The default setting is 5 attempts.

• Days to Initiate Conversations: choose the days of the week when conversations should be initiated. By default, conversations occur from monday to friday.

• Earliest Contact Time: set the earliest time of day for initiating a conversation, based on the recipient's local time zone. The default time is set to 09:00.

• Latest Contact Time: set the latest time of day for initiating a conversation, according to the recipient's local time zone. The default time is set to 16:00.

• Microsoft Azure App ID: the application’s unique Client ID, registered in Microsoft Azure Active Directory.

• Microsoft Azure Client ID: the Client ID for authentication with the Microsoft Graph API.

  

• Microsoft Azure Client Secret: the client secret used with the client ID for secure communication with the Microsoft Graph API.

• Microsoft Azure Service Account Password: the password for the service account used for authentication with Microsoft Azure.

• Microsoft Azure Service Account Scope: the OAuth2 scope that grants access to the Microsoft Graph API.

• Microsoft Azure Service Account Username: the username of the service account used for authentication in Microsoft Azure.

• Microsoft Azure Tenant ID: the Tenant ID in Azure Active Directory, representing the directory where the application is registered.

• Enable BeeKeeper: check this box to enable the BeeKeeper service. This feature is disabled by default.

Click Submit to save your configuration.