CHATBOTS

Teams IT Bot: Self-Service Entitlement & Permission Reset

Employees ask the Teams bot to reset their access on a system; the bot verifies identity, reapplies their role's baseline permissions, and logs the change.

CategoryChatbots
Enginepaperclip
Difficultyintermediate
Triggerchat
Steps6
Setup~15 min

How it runs

The automated pipeline, trigger to output.

  • TriggerTeams message requests an entitlement resetMicrosoft Teams
  • LogicVerify requester identity and account ownership
  • ActionFetch role permission baseline from policy tablePostgreSQLPostgres
  • ActionReapply baseline permissions on target systemSalesforce
  • ActionWrite before/after audit rowPostgreSQLPostgres
  • OutputConfirm restored permissions in Teams threadMicrosoft Teams

What it does

Lets employees fix broken or stale access without filing a ticket. When someone types "reset my Salesforce permissions" in Teams, the bot confirms who they are, looks up the baseline entitlement set for their role, reapplies it on the target system, and records an audit entry.

When to use it

Ideal when permission drift causes a steady trickle of "I can't access X anymore" complaints. Use it to restore role-default access safely while keeping a tamper-evident log of every reset.

How it works

  1. 1A Teams message asks the bot to reset entitlements on a named system.
  2. 2A logic step verifies the requester's identity and that they own the account in question.
  3. 3The bot fetches the role-to-permission baseline from a Postgres policy table.
  4. 4It calls the target system's API to reapply the baseline permission set.
  5. 5The reset, before/after state, and actor are written as an audit row to Postgres.
  6. 6The bot confirms in the Teams thread which permissions were restored.

Set it up

What you configure once, before turning it on.

  1. 1
    Connect Microsoft TeamsChannels, chats, files.
  2. 2
    Connect SalesforceAccounts, opportunities, cases.
  3. 3
    Connect PostgresAny Postgres URL — query, write, migrate.
  4. 4
    Set each agent's modelWe leave models unset so you pick the tier — fast + cheap, or top-quality.
  5. 5
    Tune it to your dataEdit the prompts, filters, and field mappings so it matches how your team works.
  6. 6
    Test, then turn it onRun once against a sample, confirm the output, then enable the trigger.

Run this workflow in your colony.

14-day trial. No DevOps. No Sales call. Provisioned in under a minute.