Voltage DSP Prerequisites

Complete these steps in the Voltage DSP tenant before you configure AgentDSP and connect it to Voltage DSP.

Custom Actions

AgentDSP processes requests that users submit through Voltage DSP file actions. A file action is an API custom activity defined in the tenant. At least one file action is required.

  1. In Connect, create an API-based file protection system for each custom action that AgentDSP processes. Note the API name of each custom action. The API name can differ from the display name shown in workbooks and workspace features.
  2. In Manage, on the Features page of the Create Workspace or Edit Workspace wizard, select the custom action feature for each workspace in which it should be available.
  3. Grant the custom action in the Manage and Workspace Security roles assigned to the proxy access group. See Recommended Proxy Permissions.

After you connect AgentDSP, register the same file actions on its Custom Actions page.

Proxy Account

AgentDSP signs in to Voltage DSP with a dedicated proxy account, such as filereporter-proxy. Create an account in the Voltage DSP tenant for use only by AgentDSP. Do not use a personal or administrator account. A dedicated account limits access to what the agent requires and makes its activity identifiable in the Voltage DSP audit log.

Record the account name and password. You enter them in the AgentDSP setup wizard when you connect to Voltage DSP.

Proxy Access Group

Do not assign roles to the proxy account directly. Create a dedicated group, such as filereporter-access, assign the roles and access to the group, and make the proxy account a member. A group keeps the proxy permissions in one place and lets you replace or add a proxy account without repeating role, workspace, source, and dataset assignments.

  1. In Administration, select Groups, and then select NEW GROUP.
  2. On the DETAILS tab, enter a Name, such as filereporter-access. Group names are case sensitive.
  3. On the ROLES tab, select the roles described in Recommended Proxy Permissions, and then select CREATE.
  4. Select Users, and then open the proxy account. In the Groups field, add the group, and then select UPDATE.

Role changes made to a group can take up to five minutes to take effect.

Recommended Proxy Permissions

Grant the proxy access group only the permissions it needs to call the Voltage DSP API, read workspace content, and process the registered file actions.

In Administration, select Roles to manage roles. Roles are grouped by category: Administration, Analyze, Connect, Manage, and Workspace Security. Create one role in each of the following categories and assign it to the proxy access group. The group does not require an Analyze role.

Category Example role name Purpose Permissions
Administration FilePermission-API-Admin Allows the proxy account to call the Voltage DSP API.
  • API developer
Connect FilePermission-API-Connect Allows the proxy account to manage tags.
  • Manage tags
Manage FilePermission-API-Manage Allows the proxy account to view all workspaces, read their content, and run the registered file actions across workspaces.
  • Search and view documents/tables
  • View all workspaces
  • Each custom file action processed by AgentDSP

In the permission list, select the custom activities listed below the separator. They must match the file actions registered on the AgentDSP Custom Actions page.
Workspace Security FilePermission-API-Workspace Grants the proxy account read access and the registered file actions within an individual workspace.
  • Search and view documents/tables
  • The same custom file actions selected for the Manage role

Select the activities listed below the separator. Assign this role to the proxy access group in each applicable workspace. See Workspace Security.

Select only the permissions listed in the table; clear all other permissions.

Workspace Security

Workspace Security roles apply to individual workspaces. For each workspace that AgentDSP processes, open the Create Workspace or Edit Workspace wizard in Manage:

  1. On the Security page, in the Enter name or email address box, enter the proxy access group name. Select the Workspace Security role from the Select Role list, and then select Add.
  2. On the Features page, confirm that the custom action features processed by AgentDSP are selected.

Source and Dataset Security

In Connect, each source and dataset has Security options that can limit access to specific users and groups. If the proxy access group cannot access a dataset, the proxy account cannot view workspaces that include the dataset or items that originated from it.

Review the Security options of each source and dataset used by workspaces that AgentDSP processes:

  • If Grant access to all users is selected, no change is needed.
  • If Specify the users and groups that will have access is selected, add the proxy access group to the List of Users/Groups.
  • If a dataset uses Inherit from Source, apply the preceding rules to its source.

Security changes to a source can take up to five minutes to take effect.