---
sourceDocument: Australia Enable AI
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/intelligent-experiences

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Enable AI

ft:clusterId :

    - platai

bundleId :

    - platai

workflow :

    - Platform


---

# Configure access controls across AI Agent Studio

# Configure access controls across AI Agent Studio {#ariaid-title1}

Release version: Australia  
Updated September 1, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Configure access rules in AI Agent Studio for AI agents, agentic workflows, Model Context Protocol Servers, and external AI agents.

## Before you begin

Role required: sn_aia.admin

## Procedure

1. Configure security controls for an AI Agent.  
   To configure access rules for an AI agent in AI Agent Studio, see [Define access rules for an AI agent](https://www.servicenow.com/docs/i0oknNenWsCjujmAxvRMrw "Define security controls for an AI agent to determine which users can access it and what permissions they have.").
2. Configure security controls for an agentic workflow.  
   To configure access rules for an agentic workflow, see [Define access rules for an agentic workflow](https://www.servicenow.com/docs/kgaLaIpme8WWfTULPnDFeQ "Define security controls for an agentic workflow to determine which users can access it and what permissions they have.").
3. Configure security controls in Model Context Protocol Servers.  
   To configure security controls in Model Context Protocol Servers, see [Define security controls for MCP Servers](https://www.servicenow.com/docs/Ke9dLNUYuC0QxUZt37cvWw "Define security controls for an MCP Servers to determine which users can access it and what permissions they have.").
4. Configure security controls in external AI agents.  
   To configure access rules in external AI agents, see [Create an external AI agent](https://www.servicenow.com/docs/2~au39ne15qxlghld~66bQ "Create external AI agents in AI Agent Studio to connect the ServiceNow AI Platform with third-party agentic AI providers.").

## What to do next

You can use the Access Analyzer in the Test page chat window of an AI Agent, agentic workflow, and an external AI agent. Use it to troubleshoot tools when agent execution fails due to access denial. For more information, see [Test access to an AI asset](https://www.servicenow.com/docs/qK1MtoBhHIdK_xctfMMfFQ "Verify whether a user has access to an agentic AI asset (an AI agent or an agentic workflow).").
**Related topics**   

* [Granular admin roles](https://www.servicenow.com/docs/access?context=granular-admin-roles&version=australia&pubname=australia-platform-security&ft:locale=en-US)
* [Configuring user access and data permissions for agentic workflows](https://www.servicenow.com/docs/access?context=cmpro-conf-users-agentic-wf&version=australia&pubname=australia-employee-service-management&ft:locale=en-US)