SpeechSense resource hierarchy

To manage dialogs in SpeechSense, you can use spaces, connections, and projects. The chart below provides the resource hierarchy overview in SpeechSense:

Each project and connection belongs to a single space. There are no projects and connections outside of a space.

Spaces are owned by organizations, and organizations do not interact with one another. The resources of one organization cannot interact with the resources of another one. Organizations are managed by Yandex Cloud Organization.

You can set up access in SpeechSense at the space or project level. By default, a new organization member has no access to resources within the organization. Permissions must be granted to new members explicitly.

SpeechSense resourcesSpeechSense resources

SpaceSpace

A space is an isolated SpeechSense entity within which you can create connections and projects. In the Yandex Cloud resource hierarchy, SpeechSense spaces are at the same level with DataSphere communities and clouds.

A billing account is linked to each space. You can use one account to pay for resources in multiple spaces or link a separate account to each space.

ConnectionConnection

A connection is a SpeechSense entity that contains:

• Uploaded voice call recordings or chat conversations.

• Record types: audio or text messages.

• Record metadata received from PBXs, chats, CRM systems, or other sources.

  The metadata contains such properties as the names and IDs of the agent, customer, and bot (only for chats), as well as the conversation date and language. You can use this metadata to analyze one or more conversations using reports.

If various groups of conversations have different metadata or record types, you can create a separate connection for each group.

ProjectProject

A project is an isolated SpeechSense entity within which you can manage dialogs. For example, in a project, you can view a dialog or build a report. In the Yandex Cloud resource hierarchy, SpeechSense projects are on the same level as DataSphere projects and folders.

A project can be viewed as a cross-section of data uploaded to a connection. When creating a project, you select a connection and set up filters for dialogs. As a result, filtered dialogs from the connection are added to the project.

Use multiple projects to group dialogs. For example, you can designate a separate project for each of your company's customers or products.

Inheriting access permissionsInheriting access permissions

When a user performs an operation in SpeechSense, Yandex Identity and Access Management checks the user's access permissions. Permissions that can be inherited:

• Permissions for an organization extend to the organization's resources, including spaces, connections, and projects.
• Permissions for a space extend to all connections and projects within that space.
• Permissions for a project extend to all dialogs and reports within that project.

No access permissions are granted to connections. Connections are subject to space permissions. To learn more about the roles available in the service, see Access management in SpeechSense.

Examples:

• A user with the speech-sense.spaces.creator role at the organization level can create a space.
• A user with the speech-sense.viewer (Viewer in SpeechSense) role at the space level can view data for a space, as well as its nested connections and projects.
• A user with the speech-sense.admin (Admin in SpeechSense) at the project level can perform any action within this project alone.

A user will not be able to access a space without space or organization level permissions.