All Products
Search
Document Center

Support:Manual For Integrating Alibaba Cloud Enterprise Service in Lark

Last Updated:Feb 06, 2026

Dear customer,

To enable you and your team to seamlessly and conveniently use Alibaba Cloud Enterprise Service in Lark Workbench, please complete the configuration according to the configuration guide.

image.png

Part 1: Configuration steps (about 10 minutes)

Operator: The Administrator/Application Developer of your Lark organization

Core objective: Create a custom app and grant the necessary permissions to achieve secure docking with our platform.

Step 1: Create a Custom App

  1. Please log in to [Lark Developer Platform].

  2. Create a new Custom App in the platform, define the application name and description (we recommend that you specify Alibaba Cloud Enterprise Service to facilitate queries and access by members of the organization).

image.png

image.png

Step 2: Add Application Features

Please find and click [Add Features] in the navigation bar on the left side of the application background. On this page, you need to add the following two core features to your app:

image.png

  1. Web app

    1. Purpose: After adding, your team can directly open and use the "Alibaba Cloud Enterprise Service" application in Lark.

    2. Operation: Please find the "Web app" card, click + to add. You can follow [Step 4] to add desktop-side link.

  2. Bot

    1. Purpose: After enabling the bot, the "Alibaba Cloud Enterprise Service" application can send you new message reminders to ensure that you will not miss important information.

    2. Operation: Please find the "robot" card, click + to add.

Step 3: Obtain and provide application credentials

To enable the Lark channel, please provide your organization name, App ID, and App Secret.

  1. Organization name: [Lark Open Platform] in the upper right corner and below your name is the "organization name"; The organization name "Production app@ (Organization Name)" will also be displayed below the upper left corner of the new application

image.png

  1. After the application is successfully created, please find and copy App ID and App Secret on the page-Credentials & Basic Info.

image.png

  1. Please copy the organization name, application App ID, and App Secret to your TAM for configuration (self-service configuration will be supported later).

Step 4: Configure web app link

Please fill in desktop homepage in the web app configurations. The format of the home page link is as follows. Note that {appId} needs to be replaced with the App ID of your web app:

https://ailink.gts.work/lark/{appId}/workbench

It is recommended to select "New tab in Lark".

image.png

Step 5: Activate application permissions

To ensure the normal operation of application functions (such as sending message reminders and displaying information cards), please enable the following permissions for the application.

Permission Point

Usage Description

Lark Official Permission Description

tenant:tenant:readonly

Get basic information about your business,Include:

  • enterprise name

  • enterprise number (unique in Lark platform)

  • version type (personal version/team version)

  • enterprise identity

  • enterprise avatar

Main purpose: proper display of your enterprise identity in the application

link

application:application:self_manage

Get application info.
Main purpose: Obtain the basic information of the application to verify whether your application is correctly configured.

link

im:message:send_as_bot

Allows the app bot to send messages to the user.
Main purpose: When there is '@ mentioned you' in the web application, the robot will send you a notification through a single chat to avoid missing important information.

link

cardkit:card:write

Allows the app to create and update message cards.
Main Purpose: Improve your reading experience by sending you notifications in the form of more beautiful and interactive cards.

link

Method 1: Batch Import

  1. Go to [Permissions & Scopes] and click Batch Import/export scopes

image.png

  1. Copy the following JSON into the import box and click Add

{
 "scopes": {
 "tenant": [
 "application:application:self_manage",
 "cardkit:card:write",
 "im:message:send_as_bot",
 "tenant:tenant:readonly"
 ],
 "user": []
 }
}

image.png

image.png

Method 2: Import manually

You can also choose to click Add Scopes in [Permissions & Scopes] to search the following three permission points one by one to add and open.

Permission points:
application:application:self_manage
tenant:tenant:readonly
im:message:send_as_bot
cardkit:card:write

image.png

Step 6: Security Settings

To ensure that the application runs normally, please complete the following security settings in the Lark developer page.

image.png

1.Set redirect URLs

Please add the following address to Redirect URLs.

Note: Replace '{appId}' in the preceding URL with the actual APP ID you obtained in [Step 1]. You can view it on the Lark application details page.

https://ailink.gts.work/lark/{appId}
https://ailink.gts.work/lark/{appId}/workbench
https://ailink.gts.work/thirdparty/lark/{appId}/login
https://ailink.gts.work/thirdparty/lark/{appId}/oauth2/callback
https://ailink.gts.work/lark/{appId}/person/inviteToGroup

2. Set H5 trusted domains

Please add the following domain name in H5 trusted domains:

https://ailink.gts.work

Step 7: Version Management and Release

For the first and subsequent application changes, please fill in the version number and update description in [Version Management & Release], and then save the release.

Note: You can set the Application Available Range to all or some members of an organization as needed.

image.png

Done! Please contact TAM to enter the group

You have completed all configurations, please contact your technical service manager (TAM) to obtain the group joining link. You can communicate with TAM in real time in the application, receive ticket notifications, track service progress, and enjoy the exclusive support experience of seamless integration.

Special instructions and frequently asked questions

  1. [Network Configuration] IP Whitelist (if any)

If your enterprise network environment has set up a strict IP or domain name access whitelist, please be sure to add our application website to the whitelist, otherwise the application will not open normally in Lark.

  1. [Cost Reminder] Lark Version and API Call Restrictions

    • If you are using the free version of Lark, the upper limit of API calls for custom app is 10,000 per month.

    • If you are using paid version of Lark, there is no such restriction.

    • Note: The main API call scenario of our application is to send @ message reminders through Robots, message reminders will control fatigue, and each user will receive at most once every 10 minutes. Please evaluate this amount based on your team's communication frequency. The above 10000 per month are the total number of calls to all Apis. If you are using the free version, you should also consider other calls. Charged api reference:https://open.larksuite.com/document/server-docs/getting-started/server-api-list?chargeMethod=advanced

Part 2 [Alibaba Cloud Enterprise Service] Application Usage Guide

Login authorization

Click the newly created application in [Part 1] to complete authorization (only for identification) and log in.

Service main group

After you activate the Lark channel service, the system will automatically bind the corresponding enterprise support plan service group for you. You can directly contact Alibaba Cloud Technical Service Manager (TAM) and other support personnel in the group.

Note: If your interface does not have a service master Group, please contact your technical Service Manager (TAM) to add it for you.

image.png

Enterprise Service Workstation

Click [Enterprise Service Workstation] in the service group to view all associated work tickets and participants in the group.

image.png

Create ticket

Click [Create Ticket] in the service group. The system will automatically create a ticket group and assign a technical service engineer to handle the problem for you.

image.png

Ticket group

You can communicate with technical engineers on specific issues within the ticket group.

  • If the problem is more urgent, you can click [Reminder] to speed up the processing progress;

  • In the event of a serious failure such as data loss, data corruption or online business unavailability,Please click [Emergency], we will start the emergency response mechanism, priority intervention.

image.png

Group Member Management

The [Gourp Member Management] function is supported by both the service group and the ticket group.

Add person

Click [Add people] to copy the link in the drawer and invite colleagues to join (the link is valid for 24 hours).

image.png

View the list of people

In [Gourp Member Management] , you can view:

  • Members of your organization (colleagues)

  • Alibaba Cloud service team personnel

image.png

image.png

Communication within the group

In the group chat, you can directly @ related Alibaba Cloud service personnel or colleagues to solve problems efficiently and collaboratively.

image.png