Data Transmission Service:Tutorial: Connect Lark to a DTS RAGFlow knowledge base

Add a bot and publish the application

KBSync uses a bot to access Lark data on behalf of the application. You must add a bot and publish the application to activate it before you can configure permissions.

1. Log in to the Lark Open Platform and open the application you created.

2. In the left navigation pane, choose App Features > Add App Features.

3. On the Add By Feature tab, find the Bot card and click Add.

4. At the top of the page, click Create Version.

   Alternatively, choose App Release > Version Management & Release in the left navigation pane, and then click Create Version.

5. On the Version Details page, enter App Version and Update Notes, then click Save.

   Keep the default Bot value for Default Feature On Mobile and Default Feature On Desktop.

6. In the confirmation dialog, click Confirm Release.

Configure API permissions

Grant the application the scopes it needs to read Lark Docs and knowledge bases. Without these scopes, KBSync cannot export or access your content.

1. In the left navigation pane, choose Development Configuration > Permissions & Scopes.

2. Click Bulk Import/Export Scopes.

3. On the Import tab, paste the following JSON into the JSON text box:

   {
     "scopes": {
       "tenant": [
         "docs:document:export",
         "drive:drive",
         "wiki:wiki"
       ],
       "user": []
     }
   }

4. Click Next, Confirm New Scopes, then click Request To Activate.

Create a group and add the bot

Before you can grant Cloud Drive and knowledge base access to the application, you must create a Lark group and add the application as a Group Bot.

1. Log in to the Lark client.

2. Create a new group.

3. Add the application you created in Step 1 as a Group Bot in the group.

Grant access to Cloud Drive and knowledge bases

Because tenant_access_token uses application identity, the bot must be explicitly granted access to the specific folders and knowledge bases it will sync. This is a one-time setup per folder or knowledge base.

Grant Cloud Drive access:

1. In the Lark client, go to the target Cloud Drive folder.

2. Click Share on the right side of the page.

3. Under Invite Collaborators, enter the group that contains the bot. The default Can View permission is sufficient.

4. Click Send.

Grant knowledge base access:

1. Go to the All Knowledge Bases page.

2. Hover over the target knowledge base, then click the Knowledge Base Settings icon.

3. Click the Member Settings tab. In the Roles & Permissions section, on the Administrator tab, click Add Administrator.

4. Add the group that contains the bot, then click Next and Send.

Configure API permissions

Grant the application the user-level scopes it needs to access Lark content on behalf of the user.

1. Log in to the Lark Open Platform and open the application you created.

2. In the left navigation pane, choose Development Configuration > Permissions & Scopes.

3. Click Bulk Import/Export Scopes.

4. On the Import tab, paste the following JSON into the JSON text box:

   {
     "scopes": {
       "tenant": [],
       "user": [
         "offline_access",
         "docs:document:export",
         "drive:drive",
         "wiki:wiki"
       ]
     }
   }

5. Click Next, Confirm New Scopes, then click Request To Activate.

Configure the redirect URL

The redirect URL is where Lark sends the authorization code after the user grants access. KBSync uses this code to authenticate on the user's behalf.

1. In the left navigation pane, choose Development Configuration > Security Settings.

2. In the Redirect URLs field, enter https://www.aliyun.com and click Add.

3. Turn on the Refresh User_access_token switch.

   If the switch is not visible, the feature is already enabled by default.

Get the authorization code

The authorization code is a credential that KBSync uses to get a user_access_token. You must get a new code each time you run KBSync, as the code expires.

1. Build the Lark authorization URL by replacing YOUR_FEISHU_CLIENT_ID with the App ID you recorded in Step 1:

   https://accounts.feishu.cn/open-apis/authen/v1/authorize?client_id=YOUR_FEISHU_CLIENT_ID&redirect_uri=https://www.aliyun.com&scope=drive:drive offline_access docs:document:export wiki:wiki

2. Open the URL in a browser and click Authorize.

3. After authorization, the browser redirects to https://www.aliyun.com. Copy the value of the code parameter from the redirect URL.

   Important

   The authorization code is the value of the code parameter only — do not include code=, &, or anything after &.