DataBee BeeKeeper with Azure Bot

DataBee leverages advanced generative AI-powered chatbot, DataBee BeeKeeper, to tackle the critical challenge of identifying and validating asset owners within your organization. By automating the process of reaching out to potential asset owners and verifying their information, DataBee BeeKeeper reduces gaps in IT operations, security, and compliance, allowing your teams to focus on high-value tasks.

DataBee makes predictions about who may own an unclaimed asset relying on historical user behaviors correlated to the asset and other contextual data. DataBee BeeKeeper automatically reaches out to these potential owners using your organization's chat platform (today only Microsoft Teams is supported) without requiring any manual intervention. This intelligent, conversational approach ensures assets are appropriately attributed, enhancing both data hygiene and operational accountability.

This article provides detailed guidance on configuring, deploying, and managing DataBee BeeKeeper, empowering your organization to streamline asset ownership validation seamlessly.

DataBee BeeKeeper App Setup in Azure portal

This guide will help you set up DataBee Beekeeper as an MS Teams Application.

Create a Service Principal in your Azure Portal

• Run the command

  To create a service principal/ enterprise application in MS Azure Tenant, run the following command in Azure CLI.

  az ad sp create --id <appId>

  Enter the Application ID provided by DataBee. Refer to Create Service Principal to learn more.

• Copy the id value

  Once the command runs successfully, the output will be in JSON format. Copy the value associated with the id field. You will use the service principal id in the next step.

  

• Assign app role to service principal

  To grant an app role assignment to a client service principal, you need three identifiers:

  • principalId: The id of the client service principal to which you are assigning the app role. It is the service principle id value copied from the previous step.

  • resourceId: The id of the resource servicePrincipal (the API) which has defined the app role (the application permission). Run the command below in Azure CLI to get the resource id.

    az ad sp show --id 00000003-0000-0000-c000-000000000000 --query "id" --output tsv

  • appRoleId: The id of the appRole (defined on the resource service principal) to assign to the client service principal. Run the command below in Azure CLI to get the app role id.

    az ad sp show --id 00000003-0000-0000-c000-000000000000 --query "appRoles[?value=='User.Read.All'].id" --output tsv

    

    Note:

    Since we want to add Microsoft Graph API permission we are using 00000003-0000-0000-c000-000000000000 as the application ID.

• Log in to Microsoft Graph Explorer and follow Grant an appRoleAssignment to a service principal.

  • Make a POST API call using Microsoft Graph Explorer as shown below using principalId, resourceId, and appRoleId values collected in the previous step.

  • If successful, this method returns a 201 Created response code and an appRoleAssignment object in the response body.

    POST https://graph.microsoft.com/v1.0/servicePrincipals/<principalId>/appRoleAssignments
    Content-Type: application/json
    
    {
      "principalId": "<principalId>",
      "resourceId": "<resourceId>",
      "appRoleId": "<appRoleId>"
    }

    ---

    

    

Install the App in Microsoft Teams/ Slack

Refer to Install App in Microsoft Teams and Add Slack channel to DataBee BeeKeeper for instructions.

DataBee BeeKeeper Setup in the DataBee UI

Once you log in to the DataBee UI, click on the Configuration icon at the top right side, and then select System. From the left side bar, select DataBee BeeKeeper. To configure the DataBee BeeKeeper service, fill in the fields below.

• Enable Ask an Owner: check this box to activate the Ask an Owner service. By default, this feature is disabled.

• Maximum Number of Concurrent Conversations: set the maximum number of conversations that can be initiated concurrently. The default value is set to 100.

• Frequency of Conversations: choose how often a user can contact the same asset owner- options are daily, weekly, or monthly. The default frequency is set to daily.

  

• Max Number of Contacts with a User for a Single Device: specify the maximum number of contact attempts with a potential asset owner for a single device. The default setting is 5 attempts.

• Days to Initiate Conversations: choose the days of the week when conversations should be initiated. By default, conversations occur from monday to friday.

• Earliest Contact Time: set the earliest time of day for initiating a conversation, based on the recipient's local time zone. The default time is set to 09:00.

• Latest Contact Time: set the latest time of day for initiating a conversation, according to the recipient's local time zone. The default time is set to 16:00.

  

• Microsoft Azure Tenant ID: the Tenant ID in Azure Active Directory, representing the directory where the application is registered.

• Enable DataBee BeeKeeper: check this box to enable the DataBee BeeKeeper service. This feature is disabled by default.

Click Submit to save your configuration.