How can I implement role-based access control (RBAC) in my chatbot using employees data in my company?

Question

Hello Azure Community,

I'm currently developing a chatbot application for my organization, and I'm seeking guidance on implementing role-based access control (RBAC) using Azure Cosmos DB for data storage. Here's a breakdown of my requirements:

1. Data Storage: I've stored employee data in Azure Cosmos DB in JSON format. if not in azure cosmos db where can we store the employees data and in which format we should store?
2. Authentication: Users will log in to the chatbot, and based on their role (e.g., employee, assistant manager, manager, CTO &CEO), they should only have access to specific data.
3. Access Control Requirements:

Employees should only be able to view their personal data.

Assistant managers should be able to access their own data and the data of employees reporting to them.

Managers should have access to their data, data of assistant managers reporting to them, and the data of employees under those assistant managers.

CTO & CEO should have access over all the employees in the company.

I'm specifically looking for guidance on how to efficiently query Cosmos DB to retrieve data based on user roles, as well as any best practices or recommended approaches for implementing RBAC in a chatbot application.

Any advice, suggestions, or examples from the Azure community would be greatly appreciated! Thank you for your help.

Answer 1

Hi Dinnemidi Ananda Kumar •,

Welcome to Microsoft Q&A forum.

As I understand, you want some design related knowledge.

You can use below documentation to add authentication to your Bot :

https://learn.microsoft.com/en-us/azure/bot-service/bot-builder-authentication?view=azure-bot-service-4.0&tabs=userassigned%2Caadv2%2Ccsharp

For RBAC in Azure Cosmos DB refer https://learn.microsoft.com/en-us/azure/cosmos-db/role-based-access-control

Since, your question involves multiple Azure services, we recommend you to ask separate questions on each service with correct tags so that dedicated service team can support you or can go for support case so that engineer can assist you better.

Hope this helps.

Thanks.