---
sourceDocument: Australia Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/platform-security

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Check role access for an encrypted column with ServiceNow Otto for Vault

# Check role access for an encrypted column with ServiceNow Otto for Vault {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Use the check role access for encrypted column skill to identify user roles that have access to encryption and decryption keys in your instance.

## Before you begin

* Install ServiceNow Vault. For more information, see [Configuring ServiceNow Vault](https://www.servicenow.com/docs/g0XjyqN2q0hj2kEOX~baGQ "Learn how to install and configure ServiceNow Vault.").
* Ensure that the check role access for encrypted column skill is active. For more information, see [Activate an AI skill](https://www.servicenow.com/docs/access?context=configure-a-now-assist-skill&version=australia&pubname=australia-intelligent-experiences&ft:locale=en-US).

Role required: sn_vault_console.vault_console_admin

## Procedure

1. Navigate to AllVaultVault console.
2. In the ServiceNow Otto panel, select Check role access for encrypted column and specify the details.  
   Example prompt: <kbd class="ph userinput">Which roles have decryption key access to an encrypted column? Access includes read access.</kbd>

*[\>]: and then