Install BigPanda Biggy AI

Install the Biggy AI app in either Slack or Microsoft Teams.

BigPanda Biggy AI provides insights and automated workflows so you can investigate active incidents faster and identify gaps that will harden the infrastructure from future issues.

Before you begin using Biggy AI, you'll need to install the app in your chat tool. You can use Biggy AI in either Slack or Microsoft Teams.

Install BigPanda Biggy AI in Slack

📘

App token

BigPanda will provide an app token for your Slack installation.

Use the following steps to install Biggy AI in your Slack workspace:

  1. Navigate to the Biggy AI Installation Page for Slack.
  2. In the upper right corner, ensure that the correct workspace is selected from the drop-down menu. If you have multiple workspaces, you will need to repeat the installation steps for each workspace.
  3. Review the permissions granted to Biggy AI.
  4. In the drop-down menu, select a Slack channel for Biggy AI to post to for the initial installation, and click Allow.
  5. Within your Slack workspace, scroll to the Apps section and click + Add apps.
  6. Search for Biggy and select it from the list.
  7. In the Home tab, scroll to App Configuration. Select the Configure App Token button.
  8. Enter the app token provided by BigPanda and click Save.

MS Teams Installation

The MS Teams Biggy AI installation process has multiple steps outlined in the sections below including granting permissions and consent, adding the app to your MS Teams instance, and requesting app approval from BigPanda. 

You will receive a ZIP file from BigPanda containing the necessary app package to install the Biggy app as a custom application. This ZIP file includes:

  • manifest.json
  • Primary app icon
  • Secondary app icon (outline)

Upload the App to MS Teams

🚧

Required roles

The user who performs this step must have one of the following roles:

  • Cloud Application Administrator
  • Application Administrator

To upload the Biggy AI app to MS Teams:

  1. Navigate to the MS Teams Admin Center and sign in with your admin credentials.
  2. In the left sidebar, go to Teams apps > Manage apps.
  3. At the top right of the page, click Upload custom app.
  4. Upload the ZIP file provided by BigPanda containing the app package.

Grant RSC Permissions

Biggy requires a set of Resource-Specific Consent (RSC) permissions. Whenever possible, Biggy uses RSC permissions as they are less permissive, ensuring that Biggy has access only to the resources it needs.

RSC permissions for an MS Teams app can be granted through the Microsoft Teams Admin Center.

To grant RSC permissions:

  1. Within the Teams Admin Center Biggy App page, go to the Permissions tab.
  2. Under Required Permissions, click Grant admin consent.
  3. In the confirmation window, click Accept.

In the Permissions tab, you will now see a message that says “Admin consent granted for all required permissions.”

Consent Granted Message

Consent Granted Message

Grant Consent for App Permissions

After uploading the app, you need to consent to the non-RSC, application-level permissions required by the app. This is done via the Azure Portal (Entra).

To grant consent for app permissions:

  1. Go to the Azure Portal.

  2. At the top, search for Enterprise applications.

  3. Remove the filter “Application type == Enterprise Applications”

  4. In the Search by application name or object ID search bar, search for Biggy.

  5. Select Biggy from the list.

    Searching for Biggy

    Searching for Biggy

    > 🚧 Troubleshooting
    > 
    > If you can't find Biggy in the list, follow the steps in the Troubleshooting section.
    
  6. In the left menu, select Permissions.

  7. Click Grant admin consent for .

❗️

Admin consent

If you do not grant admin consent, the app will not be functional.

Biggy AI Application Does not Appear in the Azure Portal - Troubleshooting

If you do not see the Biggy app in the Azure Portal, then the individual who initially loaded the app via Teams Admin Center might not have one of the required permissions: Cloud Application Administrator or Application Administrator.

If this occurred, follow the steps below to create the app with the required permissions and grant admin consent for those permissions.

📘

App ID and Graph API resource id

The below steps use the following App ID which corresponds to the multi-tenant Biggy app developed by BigPanda:

1ff9cbdb-ea32-4ef1-af52-97e312b5c7c0.

Additionally, the Graph API resource ID used is:

00000003-0000-0000-c000-000000000000

This ID is the same globally for all tenants.

Run the following full commands in sequence to manually create the app, add the required Graph API permissions, and grant those permissions via the Azure CLI:

az login

# Create the Enterprise App

az ad sp create --id 1ff9cbdb-ea32-4ef1-af52-97e312b5c7c0

# Add Permissions

az ad app permission add --id 1ff9cbdb-ea32-4ef1-af52-97e312b5c7c0 --api 00000003-0000-0000-c000-000000000000 --api-permissions "Channel.ReadBasic.All=Role"

az ad app permission add --id 1ff9cbdb-ea32-4ef1-af52-97e312b5c7c0 --api 00000003-0000-0000-c000-000000000000 --api-permissions "Directory.Read.All=Role"

az ad app permission add --id 1ff9cbdb-ea32-4ef1-af52-97e312b5c7c0 --api 00000003-0000-0000-c000-000000000000 --api-permissions "Team.ReadBasic.All=Role"

# Grant Permissions

az ad app permission grant --id 1ff9cbdb-ea32-4ef1-af52-97e312b5c7c0 --api 00000003-0000-0000-c000-000000000000

# Verify

az ad app permission list --id 1ff9cbdb-ea32-4ef1-af52-97e312b5c7c0

See the Microsoft documentation for more details.

Add the Approved App to MS Teams

After approving the permissions, users will now be able to add the Biggy app to their Teams. 

Users can add the app by following the steps below. We recommend that an admin test these steps to ensure that the installation was successful. 

  1. Open the MS Teams desktop application.
  2. In the left menu, select Apps.
  3. In the bottom left corner, select Manage your apps.
  4. In the Built for your org section, you should see Biggy. Click the Add button.
Adding Biggy AI

Adding Biggy AI

Request BigPanda App Approval

Once the app is installed and added to the first MS Teams client within a customer tenant, BigPanda requires manual approval to enable the app for use. Approval is only required for the initial installation. 

After adding the app to MS Teams, you should see a message that says “BigPanda AIOps Copilot App has been successfully added.” Once you see that, please contact BigPanda to have the app approved. Once BigPanda approves the app, it is ready for use. 

Restricting Access to Specific Users or AD Groups in MS Teams

To restrict Biggy AI access to certain Azure Active Directory (AD) groups or users, you can use either App Permission Policies or the newer App-Centric Management approach.

Restrict Access Using App Permission Policies

App Permission Policies allow administrators to control which apps are available to users by creating and assigning policies.

To create a custom app permission policy:

  1. Go to the Microsoft Teams Admin Center and sign in.
  2. Navigate to Teams apps > Permission policies.
  3. Click Add to create a new policy.
  4. Provide a name and description for the policy.
  5. Under Microsoft apps, Third-party apps, and Custom apps, set the desired permissions. For example, you can select Allow all apps, Block all apps, or Allow specific apps and block all others.
  6. Click Save.

After creating the policy, you can assign it to users using the following steps:

  1. In the Microsoft Teams Admin Center, go to Users > Manage users.
  2. Select the user you want to assign the policy to.
  3. Under Policies, go to App permission policy and click Edit.
  4. Select the custom policy you created and click Apply.

🚧

Assigning policies to AD groups

Assigning app permission policies directly to AD groups is not supported. You will need to assign the policy to each user individually or use PowerShell scripts to automate the process.

Restrict Access Using App-Centric Policies

App-Centric Management allows administrators to manage access on a per-app basis.

To set up App-Centric Management:

  1. Go to the Microsoft Teams Admin Center and sign in.

  2. Navigate to Teams apps > Manage apps.

  3. Search for the Biggy app and select it to open the settings.

  4. Under Permissions, choose one of the following options:

    • Everyone - The app is available to all users.
    • Specific users or groups - Click Add to select specific users or groups (including AD security groups) who can access the app.
    • No one - The app is blocked for all users.
  5. Click Save to apply the changes.

📘

App-Centric Management

App-Centric Management is gradually replacing App Permission Policies. If your organization has already been migrated to this feature, you will manage app access using this method.

See the Microsoft Documentation for more information.

Update Biggy AI in MS Teams

You may need to update the Biggy AI app to a new version if additional RSC permissions were added for new capabilities that require updated permissions. 

When a new version is needed, your BigPanda account team will reach out to you to provide the updated app package. Follow the steps below to update:

  1. Within the MS Teams Admin Center, go to Teams apps > Manage apps.
  2. Select the name of the existing custom app to open the App Details page.
  3. On the banner of the app, select Upload file and upload the updated app package.

Next Steps

Get a high-level overview of how Biggy AI works in the BigPanda Biggy AI documentation.

Learn how operators can Manage Incidents with BigPanda Biggy AI.