# Agent Settings: Access

![Access control panel on the Integrations tab showing a Create role access button and a role table with an Editor role, its description, a user-count badge of 3, and a pencil edit action](/images/docs/os/agent-settings/agent_settings_access.webp)

## Overview

The Access panel manages per-agent, role-based access control. Its header reads "Access control — Manage which users can view or edit this agent by role," and the intro banner explains: "Decide who can use this agent. Share it with specific people or teams, and control what each of them is allowed to do."

Access is granted by creating a role policy on the agent and attaching users or groups to it. Each role appears as one row in the table, so the panel shows at a glance which roles exist on this agent and how many people hold each one.

To reach this panel, open the **Edit Agent** modal, switch the tab group at the top of the sidebar from **Configurations** to **Integrations**, and select **Access**. The Integrations sidebar also lists Sandbox, Tools, MCP, Datasets, API, LTI, and Embed.

## Target Audience

**Administrator**

## Settings Reference

#### Create role access
A button that opens a dialog for granting a role on this agent. In the dialog you pick a role, then attach people by searching the platform's users, entering usernames or email addresses manually, or selecting groups. The button is offered only for roles not yet assigned on the agent — each role has at most one policy.

#### Available roles
Three roles can be granted per agent:

- **Editor** — "Editors can update agent configuration, prompts, and tools."
- **Chat** — chat access limits users to conversations without editing capabilities.
- **Analytics Viewer** — allows the user to view analytics data for this agent.

#### Role table
The table lists each existing role policy with four columns: **Role** (the role name, e.g. Editor), **Description** (what the role permits), **Users** (a badge with the number of users currently holding the role — 3 in the screenshot), and **Actions**.

#### Edit action (pencil)
The pencil icon in the Actions column opens the role's access panel, where you can add or remove individual users and groups on that role. Removing everyone from a role revokes that access entirely.

## How to Use

#### Step 1: Open the Access panel
Open the **Edit Agent** modal, click the **Integrations** tab above the sidebar, and select **Access**.

#### Step 2: Create a role policy
Click **Create role access**. In the dialog, choose the role to grant — Editor, Chat, or Analytics Viewer.

#### Step 3: Add people or teams
Search your platform's users by name, add usernames or email addresses manually, or select groups to grant the role to a whole team at once. Confirm to create the policy.

#### Step 4: Review and adjust
Back in the table, check the **Users** badge to confirm how many people hold each role. Click the pencil in the **Actions** column at any time to add or remove users and groups from a role.