Skip to main content
Plan requirement: IM integration requires an On-call Pro or higher subscription. Learn more

AI SRE Required Permissions

The following list includes all permissions required when the Feishu/Lark IM integration uses AI SRE, including basic notifications, War Room, AI SRE conversations, and AI-generated post-mortem reports. In the Feishu/Lark Open Platform Permission Management page, request each official permission name below.
Official permission namePurpose
im:chatCreate and manage War Room chats, get chat information, and add chat members
im:messageRead and send direct and group messages
im:message:send_as_botSend AI SRE replies and War Room messages as the bot
im:message:updateUpdate messages sent by the app for AI SRE streaming replies
im:message.group_msgRead group chat history; required for AI SRE context and AI-generated post-mortem reports
im:message.reactions:readQuery message reactions for AI SRE processing status confirmation
im:message.reactions:write_onlyAdd or delete message reactions for AI SRE processing status confirmation
im:resourceUpload and download images, files, and other message resources
cardkit:card:writeCreate and update CardKit cards for AI SRE streaming replies
contact:user.id:readonlyGet user IDs by phone number or email for automatic linking and member invitation
contact:contact.base:readonlyGet basic contact information for reading user and department metadata
contact:user.base:readonlyGet basic user information for displaying sender names

1. Create Feishu/Lark App


1. Create Custom App

Visit Feishu/Lark Developer Console to create an enterprise custom app. You can use the Flashduty official icon as the app icon. For details, see Feishu/Lark development documentation Create Enterprise Custom App. 2025-09-18-10-37-08

2. Copy Credential Information

Go to Credentials & Basic Info page, copy App ID and App Secret for later use. 2025-09-18-10-38-52

3. Copy Event Callback Token Information

Go to Development Configuration → Events & Callbacks → Encryption Strategy page, generate and copy Encrypt Key (recommended for better security) and Verification Token for later use. 2025-09-18-10-42-01

2. Add Feishu/Lark Integration


Return to Flashduty On-call Integration Center page, select Instant Messaging → Feishu/Lark, fill in Name and the App ID, App Secret, Verification Token, and Encrypt Key copied in the previous step, then click Save to complete creation. After successful creation, you’ll see the added Feishu/Lark integration in the list. Click its name to enter the details page to view Web Configuration URL, Redirect URL, and Message Card Request URL, which will be used in subsequent steps. 2025-09-18-10-44-00

3. Configure Feishu/Lark App


1. Enable and Configure App Capabilities

  1. Return to Feishu/Lark Developer Console, enter the Feishu/Lark app you just created, go to Add App Capabilities → Add by Capability page, and enable both Web App and Bot capabilities.
2025-09-18-10-45-48
  1. Go to Web App page, configure Desktop Homepage and Mobile Homepage, both using the Web Configuration URL from integration details. See Feishu/Lark development documentation Configure App Homepage URL.
2025-09-18-10-47-46
  1. Go to Event Callbacks → Event Configuration page, configure Subscription Method (content is the Message Card Request URL from integration details). Then add the following two events:
  • im.chat.disbanded_v1
  • im.message.receive_v1
2025-09-18-11-06-05
  1. Go to Event Callbacks → Callback Configuration page, configure Subscription Method (content is the Message Card Request URL from integration details). Then subscribe to the following two callbacks:
  • card.action.trigger
  • card.action.trigger_v1
2025-09-19-18-43-03

2. Add Redirect URL to Feishu/Lark App

Go to Security Settings page, configure Redirect URL, content is the Redirect URL from integration details. See Feishu/Lark development documentation Configure Redirect URL. 2025-09-18-10-53-24

3. Request App Permissions

Go to the Permission Management page and request all permissions listed in AI SRE Required Permissions for the app created in previous steps. 2025-09-18-10-55-14

4. Publish and Use App

After completing all the above configurations, please publish the app. It can be used after admin approval. See Feishu/Lark development documentation App Publishing and Usage.
To ensure everyone can use the app, adjust the app Visibility to all employees before publishing.
2025-09-18-10-56-20 After publishing, you can access the app via Mobile or Desktop. First access requires login to link Feishu/Lark and Flashduty accounts; subsequent access will be passwordless.
Feishu/Lark → Workspace → Search app name → Open App
2025-09-18-10-57-46

5. Configure War Room

Ensure the app has been granted the AI SRE required permissions listed at the beginning of this page.
After completing the previous steps, in the Flashduty On-call integration configuration page’s Enhanced Features section, check Enable War Room to activate this feature—no additional configuration needed.
Only one IM integration can have War Room enabled at a time. If you’ve already enabled War Room in another IM integration (such as Dingtalk, Slack, or WeCom), you need to disable it there first before enabling it in the current Feishu/Lark integration.

6. Linked Users

In the Linked Users tab of the integration detail page, you can view the linking status between team members and Feishu/Lark accounts, and quickly complete batch linking.

View Linking Status

The linked users list shows all team members and their linking status. You can filter by:
FilterDescription
AllView all team members
LinkedView only members who have linked their Feishu/Lark accounts
UnlinkedView only members who have not yet linked their Feishu/Lark accounts
Search by name or email is supported.

One-Click Linking

When unlinked members exist, click the One-Click Link button. The system will attempt to obtain Feishu/Lark account IDs via phone numbers or emails and automatically link them, equivalent to members logging into Flashduty using the same information on Feishu/Lark.
The system can only push Feishu/Lark message notifications after members complete linking. If linking fails, verify that the member’s phone number or email matches their Feishu/Lark account.

7. FAQ

Go to Feishu/Lark → Workspace → Search app name → Open App, complete one login to link Feishu/Lark and Flashduty accounts so the system can obtain user identity for message delivery.
  • Ensure account linking is complete. Go to Feishu/Lark → Workspace → Search app name → Open App, complete one login. If already logged in, try clicking the top-right menu, switch accounts, and re-login to link the account
  • Ensure you’ve purchased sufficient Licenses. View License usage in Console → Billing Center
  • Go to Feishu/Lark, add the created Flashduty bot to the target group chat
  • Return to escalation rule configuration page, refresh and reselect the group chat list
2025-09-18-14-24-40
Call Limits:
Feishu/Lark VersionTotal Calls/MonthRefresh Time
Basic Free10,0001st of each month
Other versionsUnlimited-
Rate Limits:
ScenarioLimit
All APIsMax 50 calls/second per app
Send message APIMax 1000 calls/minute per app
Group bot WebhookMax 100 calls/minute
Send to same user or groupMax 5 calls/second
After exceeding API call limits, Feishu/Lark app cannot deliver messages properly. Use notification channels reasonably. See Feishu/Lark official documentation.