Creatio.ai skill and agent permissions
In Creatio, you can set up permissions for Sub-agents and AI Agents. You can also transfer these permissions between environments using Creatio’s data binding mechanism.
AI Agent permissions are available for Creatio version 8.3.1 and later.
Configure default execution permissions
Creatio assigns default execution permissions for all newly-made Sub-agents and Agents. You can edit them later if needed. To change which users or roles receive the default permissions, configure the Default schema operation right lookup. To do this:
-
Open the AI command center workplace → Creatio.ai skills or Creatio.ai agents.
-
Open the Default schema operation right lookup.
-
Click New. This adds a new lookup record. Fill out the fields of the record as follows:
Field
Value
Name
CopilotIntentSchemaManagerDescription
Arbitrary value
User/role
The user or role who must have default execution permissions for new Sub-agents and Agents
Operation type
7 (Execute)
-
Save the changes.
Configure execution permissions for an existing Sub-agent or AI Agent
If an Sub-agent or AI Agent has no permissions configured, Creatio grants default permissions when you install the Sub-agent or AI Agent for the first time.
You can modify the execution permissions for an existing Sub-agent or AI Agent directly from the skill or agent list. To do this:
- Open the AI command center workplace → Creatio.ai skills or Creatio.ai agents.
- Open the relevant Sub-agent or AI Agent.
- Expand the Permission to execute expanded list → New. This opens a window.
- Select the needed role → Select.
- Save the changes.
Grant file upload permissions to external users
External users must be granted explicit permissions to upload files and run Sub-agents or Agents. To do this:
-
Make sure the "Can run Creatio.ai" (
CanRunCreatioAIcode) system operation permission is enabled for external users. Learn more: System operation permissions. -
Make sure external users have permission to use Sub-agent or AI Agents.
-
Update the following system settings to allow access for external users:
- "Maximum session file size, in MB" (
CreatioAIMaxSessionFileSizecode) - "Allowed file extensions" (
CreatioAIAllowedFileExtensionscode) - "Session file content size limit" (
CreatioAISessionFileContentSizeLimitcode)
Learn more: Manage system settings. Ensure these settings are reviewed and configured carefully to avoid granting excessive access to external users.
- "Maximum session file size, in MB" (
Transfer default permissions between environments
To transfer the default execution permissions, create data bindings for the SysSchemaDefOperationRight database table and transfer the package. To transfer execution permissions for existing Sub-agents, create bindings for the SysSchemaOperationRight database table and transfer the package. Learn more: Configuration elements of the Data type (developer documentation), Transfer packages (developer documentation).
Attach access permissions to Sub-agents for package export
If you need to export Sub-agent access permissions together with the Sub-agent package, take the following steps:
-
Click
to open the System Designer. -
Go to the Admin area block → Advanced settings.
-
Select the target package in the left area. For example,
TestPackage. -
Click Add → Data.
-
Search for and select
SysSchemaOperationRightin the Object field. -
Set Name to a unique ID, for example,
SysSchemaOperationRight_myCustom. -
Open the Bound data tab.
-
Click Add → Schema unique identifier.
-
Open the skill page in a different tab and copy the GUID from the browser address bar (Fig. 1).
Fig. 1 GUID of an Sub-agent 
-
Return to the configuration screen, search by GUID, and select the skill.
-
Save the changes.
As a result, Creatio will add the data configuration item linked to your Sub-agent to the package.
See also
Configuration elements of the Data type (developer documentation)
Transfer packages (developer documentation)