---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Summarize Access Observer logs agentic workflow

# Summarize Access Observer logs agentic workflow {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Use the summarize Access Observer logs agentic workflow to review and summarize access logs for a specific field, identifying access sources, users, and their roles.

## Summarize Access Observer logs agentic workflow overview

Generate a summary of the user, role, and caller types that attempted to access a table column configured in Access Observer. For example, ask the agentic workflow to summarize access logs to view users who accessed a field, along
with their roles and how they accessed the data.

When you install ServiceNow Otto for Vault, this agentic workflow is turned on by default.

To modify the agentic workflow, [duplicate it](https://www.servicenow.com/docs/access?context=clone-aia-usecase&version=brazil&pubname=brazil-intelligent-experiences&ft:locale=en-US), and adjust the settings according to your requirements.

## Summarize Access Observer logs

Generate a summary of all Access Observer logs. The workflow requires the following roles:

* sn_vault_console.vault_console_admin
* security_admin
{#now-assist-vault-access-observer-logs__ul_myl_lnv_r3c}

Elevate to the roles that appear in the Elevate role list by selecting your profile icon and then selecting Elevate role.  
Note:  
The `security_admin` role isn't included in the `sn_vault_console.vault_console_admin` role composition and doesn't appear in the Elevate role list. A user with the admin role must assign it through the standard user-administration process. If the workflow reports that you don't have the `security_admin` role, or that the role isn't active for your session, contact your admin. For more information, see [ServiceNow Vault roles](https://www.servicenow.com/docs/29JMuATlNAn~6s6~53FNbg "Learn and set up the roles necessary to use ServiceNow Vault.").  
To access and configure the agentic workflow:

1. Navigate to AllAI Agent StudioCreate and manage.
2. Select Summarize Access Observer logs.  
Note:  
The summarize Access Observer logs agentic workflow is triggered automatically when you secure custom applications using ServiceNow Vault console dashboard. You can also invoke the agentic workflow manually in the ServiceNow Otto panel.

## AI agents used in the summarize Access Observer logs agentic workflow

{#now-assist-vault-access-observer-logs__entry__2}

| Name | Description |
|-|-|
| Access Observer log analyzer agent | Uses various tools to generate a summary of the user, role, and caller types that attempted to access a table column configured in Access Observer. |
[Table 1. AI agents names and descriptions]

There might be AI agents installed on your instance that are not used in agentic workflows. To learn how to see all agents that are available to you, see [Find AI agents](https://www.servicenow.com/docs/access?context=find-ai-agents&version=brazil&pubname=brazil-intelligent-experiences&ft:locale=en-US).

*[\>]: and then