# Security Bot configuration

## Overview

[Security Bot add-on](./../Security%20Bot%20(add-on).md) allows your [Personal Bot](/doc/e59a06a3-4c30-4082-b5ba-523fef7ae733) to act as your parcel security. Below you will find all the instructions needed to configure the add-on.

**IMPORTANT:** Please be advised that in-order for the add-on to work, bot must be an **Estate Manager** or parcel must be **Group Owned** and bot must have group permissions. [Read more here](/doc/cd82af30-e797-47f5-941a-96c22b9306e6)

### Security Setup

In general, there are 3 types of security modes that you can enable. You can access this page by visiting your going over to Security Bot add-on and click **Use ban lists**

 ![](https://nyc3.digitaloceanspaces.com/smartbots-docs/uploads/20adbcf8-a916-46eb-b77b-ad6944665550/5699ab3d-2a3f-4d30-97e7-ecc4dc95ffa5/Security_Bot_security_modes_numbered_new.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=DO801JV4MUMY3YAEJCWC%2F20261113%2Fnyc3%2Fs3%2Faws4_request&X-Amz-Date=20261113T141500Z&X-Amz-Expires=86400&X-Amz-Signature=fb6e9a31d6edcaf9c26e78f15712009204dcf3712e92c228460d9ffca36e2101&X-Amz-SignedHeaders=host&x-amz-checksum-mode=ENABLED&x-id=GetObject " =708x777")


1. **Block all + allow in allowed list:** Bot will not allow anyone to enter the parcel unless they're added on **allowed lists** (See **Managing access lists** below)
2. **Allow all + block all in blocked list:** Bot will allow everyone to enter except for those who are added on **blocked list**
3. **Allow all:** Fully disables the protection and bot will let anyone in
4. **Parcel name:** Bot will operate the add-on only in specified parcel. Useful to prevent bot spamming other locations. (Such as Info HUBs after Rolling Restarts)
5. **Welcome message:** Bot sends this IM to anyone who lands as a greeting. Can be left blank for no greeting.
6. **Warning delay:** Defines the amount of time (seconds) before **Warning message** is sent after visitors arrival.
7. **Warning message:** The text that bot sends to visitor as a warning.
8. **Kick delay:** Defines the amount of time (seconds) before **Kick message** is sent after visitors arrival.
9. **Kick message:** The text that bot sends to visitor before kicking them.

## Managing access lists

The access lists define who gets to skip the bot's security under **Security Modes** or fully workaround it.

* If a resident is added to **blocked list**: Bot will immediately eject them from parcel.
* If a resident is added to **allowed list**: Bot will let them enter on any conditions.

To add someone to either of the list:


1. Visit your add-on page & click **Edit access lists**
2. Click **Add resident** under corresponding list

   ![](https://nyc3.digitaloceanspaces.com/smartbots-docs/uploads/20adbcf8-a916-46eb-b77b-ad6944665550/52c279a5-bd63-4ca8-a546-ce9567d4ade9/Security_Bot_access_list_highlighted.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=DO801JV4MUMY3YAEJCWC%2F20261113%2Fnyc3%2Fs3%2Faws4_request&X-Amz-Date=20261113T141500Z&X-Amz-Expires=86400&X-Amz-Signature=db615db618cda5e2402e2329bc02dcfef775dceabf69d9d5db9ccad593cb34fb&X-Amz-SignedHeaders=host&x-amz-checksum-mode=ENABLED&x-id=GetObject " =600x325")
3. Enter SL name and click **Add avatar**

   ![](https://nyc3.digitaloceanspaces.com/smartbots-docs/uploads/20adbcf8-a916-46eb-b77b-ad6944665550/a3f79350-9684-4631-82d7-cfadb8fad777/Security_bot_access_lists_adding_resident.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=DO801JV4MUMY3YAEJCWC%2F20261113%2Fnyc3%2Fs3%2Faws4_request&X-Amz-Date=20261113T141500Z&X-Amz-Expires=86400&X-Amz-Signature=953d5048f07369bf42d412e62a11c123796967d0100655ce512f598eefb837e6&X-Amz-SignedHeaders=host&x-amz-checksum-mode=ENABLED&x-id=GetObject " =600x317")

Optionally, from the left-side you can select any of the recent visitors name.

## Setting up access word

**Access word** is a unique optional feature which acts as a password. If access word is given to bot via IMs, visitor will not get ejected. This is a useful feature to allow special guests in *without adding them to Access lists*

To setup an Access word:


1. Visit the add-on's main page
2. Click **Access word**
3. Enter the special access word

 ![](https://nyc3.digitaloceanspaces.com/smartbots-docs/uploads/20adbcf8-a916-46eb-b77b-ad6944665550/1b74dcc1-037b-4d2e-b0eb-7afeb70f3b7b/Security_Bot_access_word.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=DO801JV4MUMY3YAEJCWC%2F20261113%2Fnyc3%2Fs3%2Faws4_request&X-Amz-Date=20261113T141500Z&X-Amz-Expires=86400&X-Amz-Signature=03db878b97a367a85691d43241e91558e19fc3822aa3fe9675476eaa1f62208a&X-Amz-SignedHeaders=host&x-amz-checksum-mode=ENABLED&x-id=GetObject " =600x302")

You can also configure the effectiveness of the access word:

* You can set the expiration date of the access word (It will no longer be effective after it's expired)
* How long the access word will allow entry to a visitor

## Setting up spam protection

 ![](https://nyc3.digitaloceanspaces.com/smartbots-docs/uploads/20adbcf8-a916-46eb-b77b-ad6944665550/c2902af2-8df5-45c4-8083-1edc78fd6444/Security_Bot_spam_protection.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=DO801JV4MUMY3YAEJCWC%2F20261113%2Fnyc3%2Fs3%2Faws4_request&X-Amz-Date=20261113T141500Z&X-Amz-Expires=86400&X-Amz-Signature=38c0ad4a82abcfb1e15ecebde6e1d235616138568c2cc81a6e3e527b47df7f5e&X-Amz-SignedHeaders=host&x-amz-checksum-mode=ENABLED&x-id=GetObject " =600x326")

**Spam Protection** is also one of the unique features to keep your parcel secure from unnecessary group invitations. If bot receives an invite - it will **eject & blocklist** the sender.

To enable Spam Protection:


1. Visit your add-on's main page
2. Click **Spam Protection**
3. Enable the checkmark **Kick and ban residents who try to invite bot**

## Monitoring visitors live

Lastly, you can monitor the parcel visitors live. You can add them to **Access lists** directly from this page without entering their names.

 ![](https://nyc3.digitaloceanspaces.com/smartbots-docs/uploads/20adbcf8-a916-46eb-b77b-ad6944665550/2c726bde-82b4-42ee-a41f-e78c8ec29e68/Security_Bot_visitor_monitoring.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=DO801JV4MUMY3YAEJCWC%2F20261113%2Fnyc3%2Fs3%2Faws4_request&X-Amz-Date=20261113T141500Z&X-Amz-Expires=86400&X-Amz-Signature=b301af21015894f710a6bafa482af4c5fe11c56dfd57455d357b3882b30e96b0&X-Amz-SignedHeaders=host&x-amz-checksum-mode=ENABLED&x-id=GetObject " =600x247")

To visit Live Monitoring page:


1. Visit your add-on's main page
2. Click **Visitors today**

---

**Documents**

- [Security Bot group permissions](https://www.mysmartbots.com/docs/s/main/doc/security-bot-group-permissions-Ye8VycM1iL)