Frequently Asked Questions (FAQs)
Q1: How does InspectRAG integrate with Active Directory?
A: InspectRAG uses LDAP to fetch users and groups from Active Directory. It synchronizes permissions and roles in real-time to ensure access control is consistent across the organization.
Q2: Can InspectRAG be deployed in both on-premise and cloud environments?
A: Yes, InspectRAG supports hybrid environments, including on-premise deployments with Windows Active Directory and cloud-based Azure AD and SharePoint Online.
Q3: What happens if user roles or permissions change in Active Directory?
A: InspectRAG synchronizes permissions in real-time. If any changes occur in Active Directory, they are immediately reflected in InspectRAG during the next sync cycle to ensure access remains up-to-date.
Q4: How does InspectRAG ensure secure access to documents?
A: InspectRAG enforces Role-Based Access Control (RBAC) by cross-verifying user roles in Active Directory and permissions stored in SharePoint. Users can only access documents they are authorized to query.
Q5: What happens if the file content or permissions are modified after embedding?
A: Any changes in file permissions or content are captured through real-time synchronization with the vector database and SharePoint, ensuring users access the most current and authorized version of the document.
Q6: What types of databases are supported for storing embeddings?
A: InspectRAG currently supports VectorDB as the vector database for storing document embeddings and metadata. The system can be extended to support additional databases if required.
Q7: How are audit logs generated and stored?
A: All access attempts, modifications, and queries are logged and stored in audit logs. These logs can be monitored in real-time to detect suspicious activities and are essential for compliance reporting.
Q8: Can InspectRAG be customized for specific organizational needs?
A: Yes, the system is flexible and can be customized to meet the specific requirements of your organization. InspectRAG can integrate with existing systems and adapt to evolving needs over time.
Q9: How is matching done between the file and user permissions?
A: When a user sends a query, InspectRAG checks the user's roles, groups, or username against the permissions, creator, and access roles specified for the file in SharePoint. If a match is found, access to the relevant content is granted.
If no match is found: - For general queries not specific to any file, the AI provides a generic response based on available open information. - For file-specific queries without sufficient permissions, the response will be vague and generalized, e.g., "This document could vary widely in details based on context. Can you clarify further?"
This approach allows InspectRAG to secure sensitive content without explicitly indicating access restrictions.
```