---
sourceDocument: Brazil Enable AI
sourceDocumentLink: https://www.servicenow.com/docs/r/intelligent-experiences

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Enable AI

ft:clusterId :

    - platai

bundleId :

    - platai

workflow :

    - Platform


---

# Configure security controls for a skill

# Configure security controls for a skill {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Define an access control list (ACL) and role restrictions for every skill. The ACL limits which user roles can access and run the skill, and role restrictions limit the roles that the skill runs with.

## About this task

Existing skills without an ACL continue to run. However, if you edit the skill and republish it, you must add an ACL.

If you try to execute a skill when you don't have permission, you see an error that you aren't authorized.

## Before you begin

Role required: sn_skill_builder.admin

## Procedure

1. Navigate to AllAI Skill KitHome.  
   A dialog box that explains ACLs appears. You can select Got it or View skills without ACLs.
2. Add an ACL and role restrictions to an existing skill.
   1. Select the skill that you want to add an ACL to.
   2. Select the Deployment and skill settings tab and then select Security controls.
   3. Select Add ACL.
   4. Select an option.  
      {#nask-access-control__table_h4k_kys_jgc__entry__2}

      | Option | Description |
      |-|-|
      | Any authenticated user | Any logged-in user can access and run the skill. |
      | Select roles | Select the roles that a user must have to execute the skill. Note: If you select multiple roles, a user needs only one of the roles to run the skill. |
      [Table 1. Options for ACL roles]

      {#nask-access-control__table_h4k_kys_jgc}
   5. Add role restrictions.
   6. Select Apply.
   {#nask-access-control__substeps_ujx_xxs_jgc}
3. Add an ACL to a new skill.
   1. [Create a skill](https://www.servicenow.com/docs/~ak7kL0bW_JQBd9zdU1nAA "Create a custom skill for Otto. Custom skills extend the generative AI capabilities of Otto to fit your own use cases.").
   2. In the Configure security controls section, select an option for the access control list.
   3. Apply role restrictions to the skill.
   4. Continue creating the skill.
   {#nask-access-control__substeps_c15_5ys_jgc}
**Related tasks**   

* [Configure a skill prompt](https://www.servicenow.com/docs/rNMRoXbSgi0MFboenCkUMA "Configure a skill prompt to set its large language model (LLM), the randomness of its responses, and its token limits.")
* [Configure deployment and skill settings](https://www.servicenow.com/docs/pezZjXpM_LTuny6zoGHpUA "Configure where a skill appears in AI Admin Hub, review general information, set security controls, choose a provider, and add evaluation metrics.")

*[\>]: and then