Role-Based Access Control
You are viewing documentation for a legacy Rasa product. If you want to get started building assistants with Rasa please check out our latest documentation here.
When setting up Rasa Enterprise, you can create users in the UI, or you can create users from within the Rasa Enterprise pod as follows:
Helm Chart
kubectl -n <your-namespace> exec <rasa-x-pod-name> -- python scripts/manage_users.py create <username> <password> <role>
You can use the manage_users.py script to create as many users as you want. These users will sign in with the username and password you created for them, and they can change their password any time they log in.
New users are automatically created when they first sign in via single sign-on (SSO).
Permission Management
By default, there are three user roles defined: admin, annotator and tester. Admin users can customize these roles and assign users to them.
Use the User menu to navigate to the Manage Roles page. Here you can customize the permissions associated with each role, and also create new roles. Roles are defined by the set of permissions they grant. Here’s an overview of all permissions that can be assigned in Rasa Enterprise:
| Category | “view” permissions | “modify” permissions |
|---|---|---|
| Test conversation | have a conversation with the assistant and see the user’s own conversation history | - |
| Conversations | view all users’ conversation history and apply filters; view conversation evaluations | flag conversations |
| NLU training Data | view and download NLU training data and suggestions | create, delete, replace, update NLU training data; create, delete, update temporary intents and user goals |
| Stories | view and download stories | create, delete, replace, update stories |
| Responses | view response templates | create, delete, update response templates |
| Models | view and pull models | train models; update model training config; create, delete, update model tags; create, delete Rasa NLU evaluations |
| Analytics dashboard | view analytics dashboard | - |
| Deployment environment | view deployment environments config | modify deployment environments config |
| Share bot | view share bot modal |
Default Roles
Use the User menu to navigate to the Manage Users page to assign users to roles.
These are the permissions granted to the three default roles:
| Default role | Permissions |
|---|---|
| admin | all |
| annotator | Test conversation: “view”; NLU training data: “view” and “modify”; Responses: “view” and “modify”; Stories: “view” and “modify” |
| tester | Test conversation: “view” |