---
title: "How to configure AI Assistant access"
description: "Enable the AI Assistant on the instance, read-only mode, and role permissions."
---

# How to configure AI Assistant access?

AI Assistant access is set at two levels: **instance** (organization-wide) and **role** (who sees the button and who may allow automatic data changes).

## When you need this

- Enable the AI Assistant for your team on the platform.
- Allow view and guidance only — no changes through the assistant.
- Limit complex actions for some roles (e.g. operators ask questions, admins edit).

## Good to know

- Global enable is done by a **root administrator** in **Instance settings**.
- Who sees the **spark** button and whether the agent may change data is set in **Roles** for the **AI Assistant** module.
- **Agent Read-Only Mode** on the instance blocks changes for **everyone**, regardless of role.

## Before you start

- [x] You are root (for instance settings) or an administrator who can edit roles.

## Step by step

### 1. Enable the AI Assistant on the instance (root)

1. Go to **Menu → Settings** and open **Instance settings**.
2. In feature toggles, expand **Instance Agent**.
3. Enable **Instance Agent Integration**.
4. Optionally:
   - **Agent Debug Mode** — show detailed assistant activity in chat (for troubleshooting);
   - **Agent Read-Only Mode** — read only: the assistant does not create or change data, only explains via UI and tours;
   - **Instance Agent: Web Search** / **Instance Agent: Fetch URL** — public internet search and reading public URLs (see [dedicated guide](./enable-ai-assistant-web-research.md)).

More on other instance parameters — [Configure instance settings](../../settings/how-to/configure-instance.md).

### 2. Configure role permissions

1. Go to **Menu → Settings → Users → Roles**.
2. Open a role for editing.
3. Find the **AI Assistant (Instance Agent)** module.
4. Enable module access so users in this role see the AI Assistant button.
5. Set **Allow the agent to create, modify, and delete data (write mode)** separately:
   - **On** — the assistant may perform actions (unless **Agent Read-Only Mode** is on at instance level);
   - **Off** — answers, view, and guidance only; users change data manually in the UI.
6. Optionally enable **web search** and **public URL fetch** — separate permissions in the same module (see [Enable internet search and URL reading](./enable-ai-assistant-web-research.md)).

7. Save the role.

### 3. Verify access

1. Sign in as a user with the test role.
2. Confirm the **spark** button appears in the top bar.
3. Send a test request to change settings:
   - with write permission — the assistant may offer to perform the action;
   - without permission or with **Agent Read-Only Mode** — instructions or a UI tour only.

## After you finish

- Users with the right role see the AI Assistant in ConnectiveOne.
- Read-only limits apply to every request automatically.

## Related materials

- [What is the AI Assistant](../explanation/what-is-ai-assistant.md)
- [Use the AI Assistant](./use-ai-assistant.md)
- [Web search and site reading](./use-ai-assistant-web-research.md)
- [Enable internet search and URL reading](./enable-ai-assistant-web-research.md)
- [Configure roles](../../settings/how-to/configure-roles.md)
- [Glossary: AI Assistant](../../product-glossary.md#ai-assistant)