After integrating the Lark application, the account binding feature is now supported. To bind users in Intelligent Data Insights (hereinafter referred to as DataWind) with Lark accounts, follow these steps: first, enable the required permissions for sending Lark messages; then, go to System Configuration - Office Platform - User Binding and select the update method according to your needs. The following sections describe the specific steps for user binding.

Update method - Manual configuration is selected by default. You can go to the Account Management page to configure manually.

2.1 Account management #

On this page, you can create new accounts. For each account, you can set up user binding using different user information (Union Id, User Id, mobile number, or email address).

Click Batch Edit, download the template, fill it out as required, and upload it to enable batch binding.

2.2 Batch binding Lark accounts #

Batch creation of accounts via Lark can solve the following problems:

• To allow users to log in to DataWind only through Lark accounts
• To create and associate a large number of DataWind accounts in your organization in bulk
• To dynamically adjust account addition and deletion based on user onboarding and offboarding information

The detailed steps are as follows:

2.2.1 Cloud Identity Center configuration #

To allow users to log in to BytePlus directly using their enterprise Lark accounts, the enterprise administrator needs to configure this in the Cloud Identity Center of BytePlus.
(1) Enable Cloud Identity Center: After creating the enterprise organization, the administrator enters the Cloud Identity Center page of BytePlus and clicks to enable the service. (For details, see Enable Cloud Identity Center)
(2) User synchronization settings: The administrator enters the User Synchronization Settings page, clicks Configure Identity Source, selects Lark, downloads the BytePlus application, enables the application, and scans the code to bind the Lark tenant. (For details, see User Synchronization Settings.)
(3) Configure user access authorization: Use an IAM sub-user with the necessary permissions under the enterprise organization's administrator account to log in to the BytePlus console. Go to the Multi-Account Access Management page, select the accounts to be authorized, and then click Configure User SSO at the bottom of the list. (For details, see Configure user access authorization.)
After completing the above steps, enterprise employees can log in to BytePlus using their Lark accounts.

2.2.2 Add users in DataWind #

(1) Log in to DataWind with an administrator account, and click the settings icon in the upper right corner to enter system management.

(2) Click System Settings > Security Settings > System Control > License Control Mode. You can set the license control mode to "Automatically add when system users log in to this product." In this case, all accounts authorized in Cloud Identity Center can directly log in to DataWind using their Lark accounts.

If you select "System administrator configures license list," the administrator will need to perform secondary authorization. After entering system management, the administrator clicks User Management, then clicks Add User in the upper right corner to add users. Once added successfully, these users can log in to DataWind.

2.2.3 Grant project permissions #

In addition to granting users access to the DataWind platform, to allow users to access resources within a specific project, the administrator needs to grant them edit or view permissions for the project.
(1) Create a user group: Click Project Center > User Group Management, then click the plus sign in the user group list to create a new user group. After the group is created, you can click to add users (or groups).

(2) Grant project permissions to the user group: Click Permission Management, where you can select different permission categories. Permissions can be managed at the project, dashboard, and dataset levels, with four types of permissions: preview, view, edit, and manage. Note: "Preview" allows only basic browsing, while "view" provides more detailed access. Please refer to the product documentation for the specific differences between these permission types.

*Note: User groups are set up to centrally manage and authorize project resources for users with similar characteristics or needs (for example, adding all finance personnel to one user group and granting access to dashboards related to financial reports). If a dashboard is for temporary use and its participants will not collaborate after the current activity ends, you can click 'Authorize' in the upper right corner of the dashboard, separate the user list with English commas, and paste it in; alternatively, you can add participants to a Lark group and authorize the associated Lark group (you need to configure the Lark Office System Integration in advance).

3.1 Incremental update #

After selecting incremental update, when the system adds or restarts an account, it will automatically match users with the office platform. The matching rules are implemented by establishing field mappings between the portal and the office platform.

3.2 Full update #

After selecting full update, all system accounts will be matched with users on the office platform. You can choose the update cycle and must also select matching rules. If a user cannot be matched on the office platform, you can choose to clear or retain the original binding relationship.