How to configure AI Assistant access?

AI Assistant access is set at two levels: instance (organization-wide) and role (who sees the button and who may allow automatic data changes).

When you need this

  • Enable the AI Assistant for your team on the platform.
  • Allow view and guidance only — no changes through the assistant.
  • Limit complex actions for some roles (e.g. operators ask questions, admins edit).

Good to know

  • Global enable is done by a root administrator in Instance settings.
  • Who sees the spark button and whether the agent may change data is set in Roles for the AI Assistant module.
  • Agent Read-Only Mode on the instance blocks changes for everyone, regardless of role.

Before you start

  • You are root (for instance settings) or an administrator who can edit roles.

Step by step

1. Enable the AI Assistant on the instance (root)

  1. Go to Menu → Settings and open Instance settings.
  2. In feature toggles, expand Instance Agent.
  3. Enable Instance Agent Integration.
  4. Optionally:
    • Agent Debug Mode — show detailed assistant activity in chat (for troubleshooting);
    • Agent Read-Only Mode — read only: the assistant does not create or change data, only explains via UI and tours;
    • Instance Agent: Web Search / Instance Agent: Fetch URL — public internet search and reading public URLs (see dedicated guide).

More on other instance parameters — Configure instance settings.

2. Configure role permissions

  1. Go to Menu → Settings → Users → Roles.

  2. Open a role for editing.

  3. Find the AI Assistant (Instance Agent) module.

  4. Enable module access so users in this role see the AI Assistant button.

  5. Set Allow the agent to create, modify, and delete data (write mode) separately:

    • On — the assistant may perform actions (unless Agent Read-Only Mode is on at instance level);
    • Off — answers, view, and guidance only; users change data manually in the UI.

  6. Optionally enable web search and public URL fetch — separate permissions in the same module (see Enable internet search and URL reading).

  7. Save the role.

3. Verify access

  1. Sign in as a user with the test role.
  2. Confirm the spark button appears in the top bar.
  3. Send a test request to change settings:
    • with write permission — the assistant may offer to perform the action;
    • without permission or with Agent Read-Only Mode — instructions or a UI tour only.

After you finish

  • Users with the right role see the AI Assistant in ConnectiveOne.
  • Read-only limits apply to every request automatically.