Limit access to bots

You can let users create and edit bots, or simply allow users access to information about bots.

For example, software testers, project managers, and seed coordinators might not need to create bots, but can benefit from a view into bot activity.

The settings you choose affect the views on the Xcode service website.

  1. Select Xcode in the Server app sidebar, click Settings, then click Edit next to the Permissions information.

  2. Choose who can both create and view bots:

    • All users: Authenticated users and guests can create and view bots.

    • Logged in users: Local and directory users can create and view bots. All users need to authenticate.

    • Only some users: Specify existing users or groups that can create and view bots. If you don’t know the exact name of a user or group, click Add add, then enter a space in the field to browse and filter the directory.

  3. If you chose “logged in users” or “only some users,” you can also restrict view-only access. Select “Also allow view-only access,” then choose an option from the menu (the choices are the same as in step 2).

    If you chose to restrict bot creation, you can choose to restrict view-only access to bots.

  4. Click the “Allow connections from” pop-up menu, then choose one of the following:

    • All networks

    • Private networks (this automatically includes all non-routable IP address ranges like 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, 169.254.0.0/12).

    • Only some networks

  5. If you choose “only some networks,” continue with these instructions. Otherwise click OK.

  6. In the sheet, click Add add, then select an IP address group.

    If the IP address group you want isn’t listed as a choice, you need to create it first by choosing “Create a new network.” Then see Create an IP address group while customizing service access in Create custom network access definitions.

  7. To add more address groups, repeat as needed.

  8. When you’ve added all the desired IP address groups, click OK.