--- sourceDocument: Brazil Enable AI sourceDocumentLink: https://www.servicenow.com/docs/r/intelligent-experiences Release : - brazil ft:locale : - en-US ft:publication_title : - Brazil Enable AI ft:clusterId : - platai bundleId : - platai workflow : - Platform --- # AI Skill Kit roles # AI Skill Kit roles {#ariaid-title1} Release version: Brazil Updated September 10, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read Certain roles are required to use AI Skill Kit functionality. ## Role types in AI Skill Kit {#na-skill-kit-roles__section_c5n_qbm_vjc} Three separate role concepts apply when you build and deploy a custom skill. Understanding the difference helps you plan access before you start and troubleshoot permission errors after you deploy. Roles required to use the AI Skill Kit : Users need specific roles to perform activities in AI Skill Kit, such as installing the plugin, building a skill, or activating a published skill. These roles are assigned to the people on your team who build and manage skills. For a list of the roles required for each activity, see the [Roles required for common tasks](https://www.servicenow.com/docs/nlTBEaBmupmhaMaIJX61hg#section_roles_by_task) table. Roles required to trigger skills : Roles that a user must have to trigger a published skill on your instance. These roles are configured within the skill configuration as part of its access control list (ACL). The ACLs are separate from the roles required to build the skill. To learn more, see [Configure security controls for a skill](https://www.servicenow.com/docs/BqlAqPG0ojp8ADB~Eb3V_g "Define an access control list (ACL) and role restrictions for every skill. The ACL limits which user roles can access and run the skill, and role restrictions limit the roles that the skill runs with."). Roles that a skill runs under : The roles that a skill operates with while it runs, which control what data and actions the skill can access on behalf of the triggering user. These are configured on the skill as role restrictions. Role restrictions are also separate from the roles required to build the skill. To learn more, see [Configure security controls for a skill](https://www.servicenow.com/docs/BqlAqPG0ojp8ADB~Eb3V_g "Define an access control list (ACL) and role restrictions for every skill. The ACL limits which user roles can access and run the skill, and role restrictions limit the roles that the skill runs with."). Two roles ship with AI Skill Kit: * sn_skill_builder.admin for building, editing, and publishing skills. * sn_skill_builder.model_admin for managing the LLMs available to skills. {#na-skill-kit-roles__ul_u2y_rbm_vjc} The platform admin role is also required at two points: to install AI Skill Kit and to activate a published skill in AI Admin Hub. In many deployments, one person holds all three roles. Note: The ACL and role restriction concepts apply to the skill's runtime users, not to the people building the skill. If you're planning access for your build team, you only need the roles listed in the [Roles required for common tasks](https://www.servicenow.com/docs/nlTBEaBmupmhaMaIJX61hg#section_roles_by_task) table. ## Roles required for common tasks in AI Skill Kit {#na-skill-kit-roles__section_roles_by_task} Most work in AI Skill Kit requires the sn_skill_builder.admin role, including creating, cloning, editing, configuring, testing, evaluating, and publishing skills, and calling skills from scripts. Two activities require the platform admin role instead: installing AI Skill Kit and activating a published skill in AI Admin Hub. Triggering an activated skill from the UI requires whatever roles are configured in the skill's ACL. To learn more, see [Configure security controls for a skill](https://www.servicenow.com/docs/BqlAqPG0ojp8ADB~Eb3V_g "Define an access control list (ACL) and role restrictions for every skill. The ACL limits which user roles can access and run the skill, and role restrictions limit the roles that the skill runs with."). ## Skill kit admin (sn_skill_builder.admin) {#ariaid-title2} Users with this role can create, update, and publish skills in AI Skill Kit. This role is required to use AI Skill Kit. ### Contains roles {#skill-builder-admin-role__section-feature-role-contains-roles} List of roles contained within the role. None. ### Groups {#skill-builder-admin-role__section-feature-role-groups} None. This role is not assigned to any groups by default. ### Tasks requiring this role {#skill-builder-admin-role__section-feature-role-tasks} The sn_skill_builder.admin role is required for the following tasks: * [Create a skill](https://www.servicenow.com/docs/~ak7kL0bW_JQBd9zdU1nAA "Create a custom skill for Otto. Custom skills extend the generative AI capabilities of Otto to fit your own use cases.") * [Clone and edit a ServiceNow skill](https://www.servicenow.com/docs/9hhDtzCC1BT8k2Cg_t7PTA "Clone an eligible skill provided in ServiceNow Otto applications in AI Skill Kit so that you can edit its prompt or change its AI service provider. Editing the prompt lets you control the format and content of the large language model (LLM) response.") * [Create a prompt](https://www.servicenow.com/docs/aCf5iZh_zstaWO9wW1FCeQ "After you create a custom skill, create a prompt. The prompt defines the instructions that the skill sends to the LLM and the skill inputs that it uses.") * [Configure a skill prompt](https://www.servicenow.com/docs/rNMRoXbSgi0MFboenCkUMA "Configure a skill prompt to set its large language model (LLM), the randomness of its responses, and its token limits.") * [Configure deployment and skill settings](https://www.servicenow.com/docs/pezZjXpM_LTuny6zoGHpUA "Configure where a skill appears in AI Admin Hub, review general information, set security controls, choose a provider, and add evaluation metrics.") * [Configure security controls for a skill](https://www.servicenow.com/docs/BqlAqPG0ojp8ADB~Eb3V_g "Define an access control list (ACL) and role restrictions for every skill. The ACL limits which user roles can access and run the skill, and role restrictions limit the roles that the skill runs with.") * [Add a tool](https://www.servicenow.com/docs/dY1Xjxk5CPmLCq9fBvqZNg "Add and manage tools visually in the Tools editor, including decision branching, to execute different tools for your skill. Adding decision branches between tools enables you to define the conditions that must be met for a tool to run. If no conditions are met, the default branch's step is executed.") * [Add a retriever](https://www.servicenow.com/docs/XefK5OaYpgXsakJFTqdzTg "Add a retriever to your skill to augment your prompts with relevant context from AI Search results.") * [Add a web search](https://www.servicenow.com/docs/s48XE8KWY0xuF8txqNYm5A "Add a web search as a tool in AI Skill Kit to include web search results in your skill prompts.") * [Use prompt assistance](https://www.servicenow.com/docs/aaqv2QUPFUCNraAA9qDGag "Use prompt assistance to start your prompt from an example in the prompt library or from a prompt that ServiceNow Otto generates.") * [Test a prompt](https://www.servicenow.com/docs/lbl0exKhp6U2ZkGlLL33UA "After you create a prompt for your custom skill, test it before you finalize it to verify that it returns the expected results.") * [Evaluate a prompt](https://www.servicenow.com/docs/dmWxQaJDYd4ukGuGzxtfRA "Use the AI Skill Kit evaluation tools to measure how your skill prompts perform against a dataset, using automated metrics and human feedback.") * [Finalize and publish a skill](https://www.servicenow.com/docs/6QCdI481r211gzsodCxv5w "Finalize at least one prompt and publish your custom skill so that a Otto admin can activate it.") {#skill-builder-admin-role__ul-skill-builder-admin-tasks} ### Special considerations {#skill-builder-admin-role__section-feature-role-considerations} This role grants access to the AI Skill Kit application and all skill authoring functionality. It does not grant the ability to activate skills in AI Admin Hub. Activating skills requires the admin role. When configuring access control lists (ACLs) for a skill, the roles you specify in the ACL determine which users can invoke the skill. The sn_skill_builder.admin role only controls who can author skills, not who can use them. To learn more about configuring skill ACLs, see [Configure security controls for a skill](https://www.servicenow.com/docs/BqlAqPG0ojp8ADB~Eb3V_g "Define an access control list (ACL) and role restrictions for every skill. The ACL limits which user roles can access and run the skill, and role restrictions limit the roles that the skill runs with.").