Use email agentic workflow

  • Release version: Zurich
  • Updated November 20, 2025
  • 2 minutes to read

    • Use email agentic workflow to intelligently analyze inbound emails, extract information, perform necessary actions, and draft responses.

    Email agentic workflows in email notifications

    Table 1. Available email agentic workflows
    Agentic workflow name Description Available AI agents
    Intent to action Triages tasks that are created via inbound emails by identifying intent, executing actions, and drafting appropriate email responses.
    • Intent Identification Agent
    • Intent Executor Agent
    • Email Generator Agent

    Role masking enables users to limit the roles and privileges of agentic workflows during tool execution. Agentic workflows and their AI agents that get installed with Now Assist applications are assigned pre-defined roles. If you select Users with specific roles for user access, you must configure the security controls to include these roles. Data access settings must also include these roles. For the instructions to change the security controls, see Define security controls for an agentic workflow.

    Role permissions and access

    The execution role provides the minimum required permissions to execute intents. Additional intent execution roles can be added as needed to extend permissions for specific actions. Without these, the execution may fail due to insufficient permissions.

    Table 2. Roles for action execution
    Role Description
    sn_notif_agents.notification_ai_admin Has permission to read and create intents, actions and map actions.
    sn_notif_agents.notification_ai_reader Has permission to read intents and actions.
    sn_notif_agents.intent_executor Has permission to execute intents.
    Note:
    When an action runs, it uses the sender’s permission, guest users use the guest_email_agent role which is limited by default to sn_notif_agents.intent_executor. If the execution action needs more access, those permissions must be added under the sn_notif_agents.intent_executor role as a child role so it can run properly. The system masks the role based on user permissions, revealing only the roles common to both the user and the sn_notif_agents.intent_executor roles.

    Email Generation for Reply Email Action

    After you connect an AI Search profile to the reply-email action, users can submit queries that can be answered using the profile’s content. AI Search check the sender’s permissions and returns only the information permitted for their role.

    Looking for an AI agent?
    • There might be AI agents installed with the Now Assist application that are not used in agentic workflows. To learn how to see all agents that are available on your instance, see Find AI agents.
    • To find agents that might not be installed on your instance, visit the AI Agent Marketplace on the ServiceNow Store.