This article is auto-synced from its in-app version in Tai.
Company admins only. This page is visible to users with the Company Admin role.
The Agent access page shows, at a glance, who can see and run each agent across your catalogue — and lets you adjust that access in one place.
When you'd use this
Use it to review and tune agent permissions for your company: confirm a sensitive agent is restricted to admins, spot an agent that's hidden when it shouldn't be, or open an agent up to TripBuilder — without opening each agent's detail page one at a time.
Steps
Open the access matrix
In the Workbench sidebar, under AI Platform, click Agent access.
Each agent in your catalogue is a row, with a column for each kind of user.
Read the matrix
The columns are the kinds of user who might use an agent:
Super admin, Company admin, User — the Workbench roles. The Super admin column is hidden by default; turn it on with the column menu in the top-right.
TripBuilder — whether the agent is available to your TripBuilder.
Each cell shows what that kind of user can do with the agent. The Legend above the table spells out every icon:
Can see and run — full access.
Visible, can't run — the user can see the agent but isn't allowed to run it (its minimum role is higher than theirs).
No access — the user can't see the agent.
Personal agent — only its owner can see and run it — a personal agent is private to the person who created it.
Personal agents aren't surfaced in TripBuilder — a personal agent can't be used from TripBuilder.
Change who can use an agent
Click the pencil in the Edit column on the agent's row.
In the editor:
Minimum Workbench role — the lowest role allowed to run the agent. Higher roles always qualify. Choose Anyone to remove the restriction.
For built-in agents, Surface in TripBuilder — turn off to hide the agent from your company's TripBuilder.
Click Save. For a built-in agent, Reset drops your company's changes and inherits Nezasa's defaults again.
Personal agents are read-only here — their owner manages them.
How access is decided
Two questions decide what each user sees in a row:
Can they see it? Built-in and company agents are visible to everyone in your company. A personal agent is private — only its owner and Company Admins can see it.
Can they run it? An agent can carry a minimum Workbench role. A user can run it only if their own role is at least that high; otherwise they can see it but not run it.
Getting a personal agent into TripBuilder
Personal agents are private to their owner, so they can't be surfaced to TripBuilder. To make an agent available in TripBuilder, release it to your company from its detail page — company agents are available to TripBuilder by default. See Using agents.
Tips and limits
The Agent access page, and its edits, require the Company Admin role.
Changes apply to your company only — adjusting a built-in agent's access never affects other companies.
Tightening an agent's access ends any active chat sessions that no longer qualify.
Use the search box and the Ownership filter to narrow a large catalogue.
Related