Creatio.ai skill and agent permissions

In Creatio, you can set up permissions for AI Skills and AI Agents. You can also transfer these permissions between environments using Creatio’s data binding mechanism.

important

AI Agent permissions are available for Creatio version 8.3.1 and later.

Configure default execution permissions

Creatio assigns default execution permissions for all newly-made AI Skills and Agents. You can edit them later if needed. To change which users or roles receive the default permissions, configure the Default schema operation right lookup. To do this:

1. Open the AI command center workplace → Creatio.ai skills or Creatio.ai agents.

2. Open the Default schema operation right lookup.

3. Click New. This adds a new lookup record. Fill out the fields of the record as follows:

   Field	Value
   Name	CopilotIntentSchemaManager
   Description	Arbitrary value
   User/role	The user or role who must have default execution permissions for new AI Skills and Agents
   Operation type	7 (Execute)

4. Save the changes.

Configure execution permissions for an existing AI Skill or AI Agent

If an AI Skill or AI Agent has no permissions configured, Creatio grants default permissions when you install the AI Skill or AI Agent for the first time.

You can modify the execution permissions for an existing AI Skill or AI Agent directly from the skill or agent list. To do this:

1. Open the AI command center workplace → Creatio.ai skills or Creatio.ai agents.
2. Open the relevant AI Skill or AI Agent.
3. Expand the Permission to execute expanded list → New. This opens a window.
4. Select the needed role → Select.
5. Save the changes.

Grant file upload permissions to external users

External users must be granted explicit permissions to upload files and run AI Skills or Agents. To do this:

1. Make sure the "Can run Creatio.ai" (CanRunCreatioAI code) system operation permission is enabled for external users. Learn more: System operation permissions.

2. Make sure external users have permission to use AI Skill or AI Agents.

3. Update the following system settings to allow access for external users:

   • "Maximum session file size, in MB" (CreatioAIMaxSessionFileSize code)
   • "Allowed file extensions" (CreatioAIAllowedFileExtensions code)
   • "Session file content size limit" (CreatioAISessionFileContentSizeLimit code)

   Learn more: Manage system settings. Ensure these settings are reviewed and configured carefully to avoid granting excessive access to external users.

Transfer default permissions between environments

To transfer the default execution permissions, create data bindings for the SysSchemaDefOperationRight database table and transfer the package. To transfer execution permissions for existing AI Skills, create bindings for the SysSchemaOperationRight database table and transfer the package. Learn more: Configuration elements of the Data type (developer documentation), Transfer packages (developer documentation).

Attach access permissions to AI Skills for package export

If you need to export AI Skill access permissions together with the AI Skill package, take the following steps:

1. Click to open the System Designer.

2. Go to the Admin area block → Advanced settings.

3. Select the target package in the left area. For example, TestPackage.

4. Click Add → Data.

5. Search for and select SysSchemaOperationRight in the Object field.

6. Set Name to a unique ID, for example, SysSchemaOperationRight_myCustom.

7. Open the Bound data tab.

8. Click Add → Schema unique identifier.

9. Open the skill page in a different tab and copy the GUID from the browser address bar (Fig. 1).

   Fig. 1 GUID of an AI Skill

   

10. Return to the configuration screen, search by GUID, and select the skill.

11. Save the changes.

As a result, Creatio will add the data configuration item linked to your AI Skill to the package.

---

See also

System operation permissions

Creatio.ai overview

Configuration elements of the Data type (developer documentation)

Transfer packages (developer documentation)