Set Up Axonius AI for Your Team

Turn on Axonius AI, choose how it behaves, decide which roles can use it, and give each role a credit allowance.

Before You Start

You are signed in as a System Admin.
Your Axonius environment is a SaaS deployment.
Axonius has added AI credits to your environment. You can view them in Credit Management (Step 4).
You have one test user per role you plan to enable.

Users can't chat until they have credits. Only the System Admin role has a credit allowance by default. Every other role needs one from you in Step 4.

Setup Steps

Enable Axonius AI
Review General Settings
Grant role permissions
Give credits to roles
Verify

1. Enable Axonius AI

Turn on AI chat and assistant capabilities for your environment.

Where: Settings › AI Settings › General Settings

Steps:

Open General Settings.
Turn on Enable Axonius AI.

Check:

The Axonius AI chat opens for your admin account.
Ask a test question such as "How many devices do we have?" The response should include the query it used.

2. Review General Settings

Decide how Axonius AI behaves for everyone in your environment. These settings apply to all users.

Where: Settings › AI Settings › General Settings

Setting	What it does	What to consider
Enable Long Term Memory (toggle)	Lets the AI Companion keep what it learns between conversations.	Turn on if users repeat the same context often. Check with your privacy team first if conversations may include sensitive details.
Auto-Deletion (delete chat history after)	Deletes chat history after a chosen period. Default is no automatic deletion.	Match your organization's data retention policy.
Scheduled Worker Emails (checkbox)	Lets scheduled tasks send reports by email.	Reports can contain asset data. Turn this off if asset data must not leave Axonius by email.
Activation Button (checkbox)	Shows the Activate Axonius AI button in the top bar.	Keep it on so users can find the AI.
AI Workforce (two checkboxes)	Run the AI Workforce after every discovery cycle runs it automatically. Open the AI Workforce as the home page makes it the landing page.	Runs of built-in workers are currently free for a trial period.

Approval for changes: Before the AI makes a change, such as running an Enforcement action, creating a dashboard, tagging assets, or sending a message, it shows a preview. The user chooses Approve, Modify, or Cancel.

Check:

Auto-Deletion matches your retention policy.
Scheduled Worker Emails and Long Term Memory match your data-handling rules.

3. Grant Role Permissions

Choose which roles can use Axonius AI and what each one can do with it.

How Access Works

The AI uses the user's own permissions, no more. Actions such as creating dashboards or running Enforcement actions still depend on the user's regular Axonius permissions.
The AI sees only what the user sees. If a role is limited to certain subnets or business units, AI answers are limited the same way.
A role needs AI Agents > View and interact (this step) and a credit allowance (Step 4) before its users can chat.

Where: Settings › Roles › [role] › AI Agents

AI Agents Permissions

Permission	Allows the user to	Typically for
AI Agents > View and interact	Use the Axonius AI chat	Everyone who uses AI
AI Agents > Configure AI system settings	Change AI settings	Admins
AI Agents > Manage the AI Workforce	Configure the AI Workforce	Admins

Suggested Starting Points

Analyst: AI Agents > View and interact
Power user: AI Agents > View and interact, AI Agents > Configure AI system settings
Admin: All AI Agents permissions

Steps:

Open the role and find the AI Agents section.
Select the permissions for that role. Avoid selecting the AI Agents parent checkbox unless the role should get every AI permission, since it selects all of them.
Save, then repeat for each role.

Check:

4. Give Credits to Roles

Give each AI-enabled role a credit allowance so its users can start using Axonius AI.

Concepts

Bucket: A batch of credits added to your environment, with a name, size, and expiry date. You can have up to two at once.
Allowance: The number of credits one user can use from one bucket. Each user has a separate allowance in each bucket.
Role default: The allowance every user in a role receives, including users who join later.
Override: A per-user allowance that replaces the role default.

Rules

You can't allocate more credits than a bucket has unallocated. Save is disabled if a change would exceed this.
Usage draws from the bucket that expires first, then the next.
When a bucket expires, its unused credits are lost. Other buckets are unaffected. Expired buckets are hidden after 30 days.
Lowering a role's allowance below what some users have already used blocks those users immediately. The drawer shows how many before you save.
The System Admin role starts with a default of 25 credits.

Where: Settings › AI Settings › Credit Management

Steps:

Open Credit Management. Each bucket shows its size, expiry, allocated, used, and unallocated credits.
Go to the By Role tab and click Edit on a role.
Select a bucket and enter the credits per user.
Choose whether to apply the change to users already in the role. If you don't, only users who join later receive the new amount.
Review the change to the bucket's unallocated credits, then save.
Repeat for each AI-enabled role and each bucket it should use.
(Optional) On the By User tab, set an override for anyone who needs a different amount.

Tip: Keep some credits unallocated. If a bucket runs out, users who join a role later receive no allowance, and you receive an alert instead.

Check:

Every AI-enabled role has a role default in at least one live bucket.
Each bucket still has unallocated credits for new users.

What Blocked Users See

They used up their allowance.
They have no allowance.
The environment has no credits left.

5. Verify Before Rollout

Confirm the setup works end to end, then announce the feature.

Sign in as each test user and ask a question their role allows.
Sign in as a user in a role with no allowance. They should see the "no allowance" message.
Open the Activity Log. AI-initiated actions appear as [UserName] (By Agent).
Open Credit Management and confirm test usage appears.
Tell users the feature is available and which roles have access.

Onboarding Walkthrough

When a user loads Axonius, a pop-up walkthrough introduces Axonius AI. The walkthrough is on by default on a system with AI Agents, and it shows one time for each user.

Who sees it:

Admin walkthrough — A user with the AI Agents > Configure AI system settings permission, while Enable Axonius AI is off. The walkthrough has 5 steps and ends on AI Settings > General Settings.
User walkthrough — A user with the AI Agents > View and interact permission, after Enable Axonius AI is on. The walkthrough has 4 steps and ends on the Workforce Hub. An Admin who first signs in after AI is on sees this walkthrough.

Steps:

Sign in to Axonius. The Meet Axonius AI pop-up opens.
To move between steps, select Next or Back.
On the last step, select Get started. The admin walkthrough opens General Settings, and the user walkthrough opens the Workforce Hub.
For an admin, to turn on AI, enable Enable Axonius AI and save the page. The walkthrough doesn't turn on AI.

Steps in the walkthrough:

Admin — Meet Axonius AI, Ask your AI Companion anything, Assign dedicated tasks to your AI Workforce, Get notified about your departments' findings, and Manage AI Settings in your environment.
User — Meet Axonius AI, Follow the workers that matter to you, Your notifications, in one place, and Ask the AI Companion anything.

Controls:

Learn more — Opens the Axonius AI documentation in a new tab.
Skip tour and Get started — Close the walkthrough. It doesn't show again.
Close (X) or the Esc key — Closes the walkthrough. It shows the next time the user logs in to Axonius.

Consider the following:

An Admin who finished or skipped the admin walkthrough doesn't get the user walkthrough later.
While a walkthrough is due, it shows instead of the version announcement pop-up. The announcement shows the next time the user loads Axonius.
No walkthrough shows when Disable in-app announcement pop-ups is enabled.

For example, an Admin signs in to a new system, reads the 5 steps, and selects Get started. On General Settings, the Admin enables Enable Axonius AI and saves. The next day, an analyst signs in and sees the 4-step user walkthrough. The analyst selects Get started, and the Workforce Hub opens.