Skip to main content
Version: 8.2

Creatio.ai skill permissions

In Creatio, you can set up permissions for Sub-agents. You can also transfer these permissions between environments using Creatio’s data binding mechanism.

Configure default execution permissions​

Creatio assigns default execution permissions for all newly-made Sub-agents. You can edit them later if needed. To change which users or roles receive the default permissions, configure the Default schema operation right lookup. To do this:

  1. Open the AI command center workplace → Creatio.ai skills.

  2. Open the Default schema operation right lookup.

  3. Click New. This adds a new lookup record. Fill out the fields of the record as follows:

    Field

    Value

    Name

    CopilotIntentSchemaManager

    Description

    Arbitrary value

    User/role

    The user or role who must have default execution permissions for new Sub-agents

    Operation type

    7 (Execute)

  4. Save the changes.

Configure execution permissions for an existing Sub-agent​

If an Sub-agent has no permissions configured, Creatio grants default permissions when you install the Sub-agent for the first time.

You can modify the execution permissions for an existing Sub-agent directly from the skill list. To do this:

  1. Open the AI command center workplace → Creatio.ai skills.
  2. Open the relevant Sub-agent.
  3. Expand the Permission to execute expanded list → New. This opens a window.
  4. Select the needed role → Select.
  5. Save the changes.

Grant file upload permissions to external users​

External users must be granted explicit permissions to upload files and run Sub-agents. To do this:

  1. Make sure the "Can run Creatio.ai" (CanRunCreatioAI code) system operation permission is enabled for external users. Learn more: System operation permissions.

  2. Make sure external users have permission to use Sub-agent.

  3. Update the following system settings to allow access for external users:

    • "Maximum session file size, in MB" (CreatioAIMaxSessionFileSize code)
    • "Allowed file extensions" (CreatioAIAllowedFileExtensions code)
    • "Session file content size limit" (CreatioAISessionFileContentSizeLimit code)

    Learn more: Manage system settings. Ensure these settings are reviewed and configured carefully to avoid granting excessive access to external users.

Transfer default permissions between environments​

To transfer the default execution permissions, create data bindings for the SysSchemaDefOperationRight database table and transfer the package. To transfer execution permissions for existing Sub-agents, create bindings for the SysSchemaOperationRight database table and transfer the package. Learn more: Configuration elements of the Data type (developer documentation), Transfer packages (developer documentation).

Attach access permissions to Sub-agents for package export​

If you need to export Sub-agent access permissions together with the Sub-agent package, take the following steps:

  1. Click btn_system_designer.png to open the System Designer.

  2. Go to the Admin area block → Advanced settings.

  3. Select the target package in the left area. For example, TestPackage.

  4. Click Add → Data.

  5. Search for and select SysSchemaOperationRight in the Object field.

  6. Set Name to a unique ID, for example, SysSchemaOperationRight_myCustom.

  7. Open the Bound data tab.

  8. Click Add → Schema unique identifier.

  9. Open the skill page in a different tab and copy the GUID from the browser address bar (Fig. 1).

    Fig. 1 GUID of an Sub-agent
    Fig. 1 GUID of an Sub-agent

  10. Return to the configuration screen, search by GUID, and select the skill.

  11. Save the changes.

As a result, Creatio will add the data configuration item linked to your Sub-agent to the package.

See also​

System operation permissions

Creatio.ai overview

Configuration elements of the Data type (developer documentation)

Transfer packages (developer documentation)