AI Workforce Role Permissions

The AI Workforce uses four role permissions under AI Agents in the Roles settings. Each permission controls a different level of access.

Permissions Overview

View and interact

Grants access to the AI Companion and all AI Workforce pages. Users with this permission can:

• Open and use the AI Companion chat
• View the AI Workforce Homepage, Notifications, My Workforce, and Workforce Hub
• View worker briefings and run details
• Add workers to Favorites and remove them
• Run workers using Run now
• Create personal custom workers (runs under the user's own account and credits)

This permission is required for all AI features. Without it, the AI Companion icon does not appear in the top bar.

View AI Workforce Runs

Grants access to view the runs of other users' workers in the AI Workforce. Users with this permission can see runs they did not initiate, including runs triggered by the AI Workforce account.

Configure AI system settings

Grants access to AI Settings pages and the ability to change worker configuration. Users with this permission can:

• Access AI Settings > General Settings, Credit Management, and Tool Permissions
• Enable or disable Axonius AI and other AI Settings toggles
• Set per-user credit allowances
• Change a worker's status (Enabled, Paused, or Enabled Read-Only)
• Change a worker's Approved Actions and Max writes per run
• Add or edit a worker's Standing instructions

Manage the AI Workforce

Grants administrative control over the AI Workforce system. Users with this permission can:

• Stop or resume AI Workforce runs
• Change the AI Workforce cadence (schedule)
• Create organizational custom workers using Run as the AI Workforce
• Change the AI Workforce Manager's schedule

This permission requires the global data scope. Users assigned a data scope cannot use Manage the AI Workforce actions, and the relevant controls are disabled with an explanatory note.

Share conversation

Allows users to share AI Companion conversations with other users in the environment.

Data Scope and the AI Workforce

Users assigned a data scope (not the global data scope) have restricted access to AI Workforce features:

• They cannot see the AI Workforce account's runs or the Daily Digest.
• They cannot use Manage the AI Workforce actions (stop, resume, cadence changes).
• They do not have write tools available when creating custom workers.
• Standing instructions apply only within their data scope.

Users connected as a data scope cannot use the AI Companion at all — the message box is disabled.

Permission Summary

See Also

• General Settings
• Credit Management
• Tool Permissions
• Managing Roles