Access Observer configuration manager AI agent

reference australia Updated Sep 10, 2026 2 min read vault-access-observer-configuration-manager-ai-agent.md
Raw file servicenow.com

This ServiceNow Vault agent helps users to manage Access Observer configurations for specific fields

Workflow

  1. Check the user has the security_admin role.
  2. Identify which operation the user wants to perform, or present the five supported options:
    • Create

      Collect a table and column. Validate that both exist and aren't blocked, collect start/end dates, then run through a series of checks before creating the Access Observer configuration. On success, direct the user to the Summarize Access Observer logs skill.

    • Delete

      Collect table and column and show matching configurations. Prompt the user select one, and delete it.

    • Deactivate

      Show all active configurations and have the user pick one from the list, then deactivate it.

    • Get/Fetch

      Collect table and column. Retrieve and display all configurations for that specific combination.

    • List all

      Retrieve and display all Access Observer configurations.

Field

Description

Allow third party to access this AI agent

When enabled, third-party AI agents can use this agent. This value is off (false) by default. This setting is defined in the AI Agent configs [sn_aia_agent_config] table on the External discoverable field.

Allow AI specialists to access this AI agent

When enabled, AI specialists can use this agent. This value is off (false) by default. When set to true, more configuration options for tools become available so that an AI specialist can map inputs and response templates to tool outputs. This setting is defined in the AI Agent configs [sn_aia_agent_config] table on the Specialist enabled field.

Manage long-term memory

When enabled, all previous user interactions are used as context for the LLM. This value is off (false) by default. This setting is defined by the sn_aia.ltm.enable_long_term_memory system property. For more information, see ServiceNow Otto AI agents reference.

Tools

  • Scripts

Check if a table is blocked

Check if user has security_admin role

Check table and column available

Create Access Observer configuration

Deactivate Access Observer configuration

Delete Access Observer configuration

Get Access Observer configuration

Get all Access Observer configurations

Get child tables recursively

Get parent tables recursively

Validate end date and time

Validate time overlap

Validate start date and time

Get active AO configuration count and limit

Allowed user roles The specific user roles that can access this AI agent.

Not defined.

Data access roles The specific user identity roles that determine which data the AI agent can access and what actions it can take.

sn_vault_console.vault_console_admin, security_admin

Triggers

Optional. None defined by default. An admin can specify triggers if desired. For more information, see Add a trigger to an AI agent.

Channels

Configure an assistant for Virtual Agent or ServiceNow Otto panel using Assistant Designer.

Used in agentic workflows

Access Observer configuration

Learn more about ServiceNow Vault at [ServiceNow Vault](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/servicenow-vault-landing.md).

Parent Topic:ServiceNow Vault AI agents

Search documentation
Search document titles and file paths on the australia branch