Dingtalk

​

AI SRE Required Permissions

The following list includes all permissions required when the Dingtalk IM integration uses AI SRE, including basic notifications, War Room, AI SRE conversations, and AI-generated post-mortem reports. In the Dingtalk Open Platform Permission Management page, request each official permission name below.

​

1. Create Dingtalk App and Add Dingtalk Integration

​

1. Create Custom App

Visit Dingtalk Developer Console → App Development → Enterprise Internal Development, create an app. See Dingtalk development documentation Create Enterprise Internal App - H5 Mini App. You can use the Flashduty official icon as the app icon.

​

2. Copy Enterprise CorpId

Click the enterprise avatar in the top right corner, copy CorpId from the dropdown menu. Return to Flashduty On-call integration configuration page, fill in the corresponding CorpId in the form.

​

3. Copy App Credential Information

Enter the created app details page, navigate to App Capabilities → Credentials & Basic Info via the left menu, copy AgentId, Client ID, and Client Secret. Return to Flashduty On-call integration configuration page, fill in the corresponding AgentId, Client ID, and Client Secret in the form.

​

4. Copy Event Subscription Information

Go to Development Configuration → Events & Callbacks page. Set push method to HTTP Push, then click the button to generate Encryption aes_key and Signature Token, and copy and save them. Return to Flashduty On-call integration configuration page, fill in the corresponding Encryption aes_key and Signature Token, click Save.

​

5. Configure Event Subscription

Go to Development Configuration → Event Subscription page. Configure Event Subscription Request URL using the Event Subscription Request URL from Flashduty integration details. Click Save after configuration. Below the Save button, select these three group chat events: Group chat name changed, Cool app installed in group, and Cool app uninstalled from group, then click Save.

​

6. Add App Capabilities

Create a Cool App. Go to Development Configuration → Add App Capabilities → Cool Apps → Cool Apps List page, click Create Cool App, select Extend to Group Chat. Enter the Edit Cool App page and complete the following steps:

1. Fill in basic information. You can use the Flashduty official icon as the icon.

2. Configure feature design. Select Group Shortcut Entry and Message Card on the left. You can use the Flashduty official icon for the group shortcut icon; copy the Cool App Web URL from integration details for desktop and mobile access URLs.

3. Skip step three (Feature Development), proceed to step four Preview & Publish, click Publish and confirm.

​

7. Configure Bot and Message Push

Go to App Capabilities → Bot page, enable bot configuration, fill in name and upload icon, then click Save. You can use the Flashduty official icon as the icon.

​

8. Configure App URLs

Go to App Capabilities → Web App page. Configure App Homepage URL and PC Homepage URL using the App Homepage URL and PC Homepage URL from Flashduty integration details. Click Save when done.

​

9. Request App Permissions

Go to Development Configuration → Permission Management page, request the following permissions for the group app created in previous steps:

• qyapi_chat_manage: Get group chat information
• qyapi_robot_sendmsg: Send messages to group chats or individuals

If you need AI SRE, also confirm that all AI SRE required permissions listed at the beginning of this page have been requested.

​

2. Configure War Room

Before configuring War Room, confirm that the app has been granted the AI SRE required permissions listed at the beginning of this page.

​

1. Request App Permissions

Go to Development Configuration → Permission Management page, request the following permissions for the group app created in previous steps:

• qyapi_chat_read: Get group chat information
• qyapi_chat_base_read: Get group chat information
• qyapi_get_member_by_mobile: Allow the current app to get Dingtalk users by phone number for inviting users to join group chats

​

2. Configure Group Template

Navigate to Open Capabilities → Scene Groups via the Dingtalk Open Platform top menu bar.

1. Configure Group Bot. Select Bot in the left menu, then click Create Group Bot.

Fill in the group bot configuration. If you need AISRE, configure Message Callback URL, Message Callback Token, and Source Website as shown below. These fields are used for AISRE Dingtalk message callbacks. Example Configuration: After configuration, click Create, then click Approve. After “Submission successful” appears in the top right corner, Dingtalk has automatically approved the group bot.

2. Configure Group Template. Select Group Template in the left menu, click Create Group Template. Set Enterprise Type to Internal, and set Available Apps to the published custom app created in previous steps. Then fill in template information in the next step. Template Name, Icon, Description, Text Introduction, Template Description, Image Introduction and other descriptive information won’t affect group template functionality—you can configure any values that meet requirements. Example Configuration:

   Item	Value
   Template Name	Flashduty War Room
   Icon	Flashduty official icon
   Description	One-click war room creation for active incidents.
   Text Introduction	One-click war room creation for active incidents.
   Template Description	One-click war room creation for active incidents.
   Image Introduction	Flashduty official icon

   In Select Bot configuration, click Select Created Bot, select the group bot created in the previous step. Keep other configurations as default. Finally click Save Edit. In the Fill in Gray Group step, click Create Gray Group, then click Publish Gray. Finally, click Group Template in the left menu again, then click to enter the group template just created. Click Submit for Review, after Dingtalk automatically approves, finally click Publish.
3. On the published group template details page, copy Template ID and Bot ID. Return to Flashduty On-call integration configuration page, fill in the corresponding Template ID and Bot ID, click Save.

​

3. App Publishing and Usage

After completing the above steps, confirm that the custom app has been published with the latest version. If it has not been published yet, or if you changed app settings after publishing, go to App Publishing → Version Management & Publishing, create a new version, and publish it. After publishing, you can access the app via Mobile or Desktop. First access requires login to link Dingtalk and Flashduty accounts; subsequent access will be passwordless.

​

4. Linked Users

In the Linked Users tab of the integration detail page, you can view the linking status between team members and Dingtalk accounts, and quickly complete batch linking.

​

View Linking Status

The linked users list shows all team members and their linking status. You can filter by: Search by name or email is supported.

​

One-Click Linking

When unlinked members exist, click the One-Click Link button. The system will attempt to obtain Dingtalk account IDs via phone numbers and automatically link them, equivalent to members logging into Flashduty using the same phone number on Dingtalk.

​

5. FAQ