Components installed with AI Control Tower

reference brazil Updated Oct 9, 2026 8 min read aict-installed-with.md
Raw file servicenow.com

Several types of components are installed with activation of AI Control Tower, including plugins, user roles, and tables.

Plugins installed

The plugins in the Core plugins table are installed with AI Native Experience for AI Control Tower. The plugins in the Additional plugins table are installed with AI Control Tower (sn_aict), which is part of AI Control Tower for Enterprise AI Foundation. If sn_aict is already on your instance when you install AI Native Experience for AI Control Tower, you already have these plugins.

Plugin Plugin ID Description
AI Control Tower Core sn_ai_governance Centralizes AI governance across the enterprise by combining AI assets and controls in a single hub.
AI Asset Management sn_ai_asset_mgmt Tracks and manages the lifecycle of AI assets such as systems, models, datasets, and prompts.
AICT UI Application sn_app_aict_ui Provides the AI Control Tower user interface.
AI Experience - Core com.glide.ai_experience Provides the services that AI Control Tower uses to render pages and cards, apply themes, and save card configuration changes.
AI Control Tower - Evaluations sn_ai_observe Enables the evaluation framework, scoring engine, and monitoring components for your AI systems.
AI Policy Framework sn_ai_policy_fwk Authors and enforces policies for AI agents and systems, including automatic containment.
AI Security and Privacy sn_ai_security Provides security and privacy monitoring for AI assets.
AWH for AI Control Tower sn_awh_config Configures the Agent Workspace Hub for AI Control Tower.
Value dashboard for AI Control Tower sn_ai_value Provides the Value dashboard for measuring AI investment return and adoption.
AI Risk and Compliance Management sn_grc_ai_gov Manages AI risks across their lifecycle, including risk classification, mapping to regulatory authority documents, and policy compliance.
AI Case Management sn_ai_case_mgmt Tracks, triages, and resolves inquiries and incidents related to AI assets.
AI Risk and Compliance Integration with Control Tower sn_grc_ai_irm_intg Surfaces risk posture, compliance status, and case workflows directly in AI Control Tower so you can manage AI use cases against regulatory frameworks.
AI Control Tower for ServiceNow Otto sn_aict_nowassist Syncs ServiceNow Otto AI skills into the AI Control Tower inventory.
ServiceNow Otto for AI Control Tower sn_aict_genai Adds built-in AI insights and recommendations to AI Control Tower.
Expanded Model and Asset Classes sn_ent Provides the model and asset classes that AI Control Tower uses. Required for API access to AI asset records.
ServiceNow AI Lens sn_ai_lens Provides AI reporting and lens capabilities.

Supporting plugins, such as Setup Hub, Data Privacy, Data Discovery, Security Center, the Model Context Protocol client and server, and the GRC and Smart Assessment plugins, are installed automatically as dependencies. To see every dependency for an application, open the application in Application Manager.

Plugin

Plugin ID

Description

AI Control Tower

sn_aict

Centralizes AI governance across the enterprise, including AI discovery, asset lifecycle management, risk and compliance, and value measurement.

AI Discovery

sn_ai_disc

Discovers AI assets, agents, and usage from hyperscaler and external AI platform connectors.

AI SGC Discovery

sn_ai_sgc_disc

Installs the Service Graph Connectors that AI Discovery uses.

AI Service Graph Connectors for Amazon, Google, LangGraph, and Microsoft

  • sn_ai_disc_aws_sgc
  • sn_ai_disc_gcp_sgc
  • sn_langgraph_integ
  • sn_ai_msft_integ

Discover AI assets from Amazon, Google, LangGraph, and Microsoft platforms.

AI Trace Collector

sn_aict_trace_coll

Collects trace data from external AI platforms for monitoring and evaluation.

The following plugins aren't installed with AI Control Tower. Install them separately to add the features that they provide.
Plugin Plugin ID Description
Enterprise Architecture for AICT sn_ea_aict Provides the shared many-to-many data model connecting AI systems and business applications, independently of the plugin. For more information, see Enterprise Architecture for AICT plugin installation and upgrade considerations.
Shadow AI Detection sn_shadow_ai Detects unsanctioned AI use on your network and endpoints.

Roles installed

Roles installed with AI Control Tower are described in the following tables. When you assign a role, you also assign the roles that it contains.

Role title [name]

Description

Contains roles

AI Steward

[sn_ai_governance.ai_steward]

Leads the execution of AI Control Tower initiatives and coordinates governance activities between innovation, legal, security, risk, and compliance teams. Configures governance and approval workflows, approves or rejects AI asset approval requests, configures Multi-instance Management, activates hyperscaler connections, sets up MCP client connections, and deactivates or reinstates AI agents to contain security risks.

  • aig_admin
  • sn_ai_asset_mgmt.ai_asset_owner
  • sn_ai_case_mgmt.ai_case_manager
  • sn_ai_governance.integration.rest
  • sn_ai_governance.workspace_user
  • sn_ai_opty_engine.ai_insight_user
  • sn_ai_policy_fwk.admin
  • sn_ai_security.operator
  • sn_ai_security.viewer
  • sn_aia.viewer
  • sn_awh_config.awh_admin
  • sn_awh_config.data_read
  • sn_doc.admin
  • sn_generative_ai.data_steward
  • sn_grc_ai_gov.ai_risk_and_compliance_business_user
  • sn_grc_ai_gov.ai_risk_and_compliance_reader
  • sn_mif.mif_admin
  • sn_mif.mif_read
  • sn_na_conv_eval.eval_admin
  • sn_nowassist_admin.user
  • sn_query_gen.user
  • sn_shadow_ai.admin
  • sn_vsc.task_manager
  • telemetry_query_service_user

Workspace Administrator

[sn_ai_governance.workspace_admin]

Has all AI Steward permissions. Configures the cards on AI Control Tower pages, including titles, chart types, list sizes, and record conditions. Card configurations that this role saves apply to all users on the instance.

  • sn_ai_governance.ai_steward
  • sn_ai_governance.workspace_user
  • aix_config_admin

AI Control Tower Workspace User

[sn_ai_governance.workspace_user]

Accesses the AI Control Tower home page and the AI Portfolio tab. Owns and manages AI assets.

AI Asset Owner

[sn_ai_asset_mgmt.ai_asset_owner]

Manages AI systems, AI models, datasets, and prompts through the asset lifecycle from intake to retirement. Confirms that AI assets are represented accurately and kept up to date, and marks Deploy-phase lifecycle tasks complete.

  • aix_read
  • sn_ai_governance.workspace_user
  • sn_ai_opty_engine.ai_insight_user
  • sn_grc_ai_gov.ai_risk_and_compliance_business_user
  • sn_vsc.task_manager

AI Observability Admin

[sn_ai_observe.ai_observability_admin]

Accesses and manages evaluation data, including sessions, traces, and spans.

None

AI Policy Framework Admin

[sn_ai_policy_fwk.admin]

Has full access to AI Policy Framework records, including execution audit records.

sn_ai_policy_fwk.viewer

AI Policy Framework Viewer

[sn_ai_policy_fwk.viewer]

Views and reports on AI Policy Framework connectors, actions, and instances, and views execution audit history.

None

AI Security Operator

[sn_ai_security.operator]

Deactivates and reinstates AI agents using kill switch protocol. Also views the agent containment list. Every AI Steward has this role.

sn_ai_security.viewer

AI Security Viewer

[sn_ai_security.viewer]

Views AI Security and Privacy information, including the Access Map.

  • data_privacy_channel_auditor
  • data_privacy_telemetry_accessor
  • sn_aia.viewer
  • sn_na_analytics.viewer

AWH Admin

[sn_awh_config.awh_admin]

Configures AWH for AI Control Tower.

  • sn_awh_config.awh_read
  • sn_awh_config.data_read

AWH Reader

[sn_awh_config.awh_read]

Views the AWH configuration.

sn_awh_config.data_read

AI Discovery Admin

[sn_ai_disc.discovery_admin]

Administers AI Discovery and its connections. Installed with the AI Discovery plugin.

  • connection_admin
  • sn_ai_governance.ai_steward
  • sn_cmdb_int_util.sgc_admin
For the roles installed with AI Risk and Compliance and AI Case Management, see [Roles and responsibilities](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/governance-risk-compliance/roles-installed-with-ai-risk-and-compliance.md).

Role title [name]

Description

Integration REST

[sn_ai_governance.integration.rest]

Provides read-only access to AI asset inventory and governance data for ServiceNow products and third-party platforms, including asset details, assessments, risks, controls, issues, policy exceptions, and lifecycle information.

External Registry Editor

[sn_ai_governance.external_registry_editor]

Allows an approved partner service account, such as Microsoft Agent365, to sync discovered agent registration status through the External Registration Sync API.

Retrieve Publishable Asset

[sn_ai_governance.retrieve_publishable_asset]

Allows a service account to retrieve ServiceNow AI assets that are marked as publishable. Intended for third-party platforms such as Microsoft Admin Center.

AI Data Sender

[sn_ai_observe.ai_data_sender]

Sends and retrieves evaluation data through API calls.

AWH Integration REST

[sn_awh_config.integration.rest]

Provides access to the AWH Gateway REST API.

## Tables installed

The following tables store the AI assets, governance records, and monitoring data that you work with in AI Control Tower.

Table

Description

AI System Digital Asset

[alm_ai_system_digital_asset]

Records for AI system assets. Captures class, state, ownership, model category, and the associated models and datasets.

AI Model Digital Asset

[alm_ai_model_digital_asset]

Records for AI model assets. Captures training and evaluation datasets and defaults the category to AI Model.

AI Dataset Digital Asset

[alm_ai_dataset_digital_asset]

Records for AI dataset assets. Captures dataset relationships and defaults the category to AI Dataset.

AI Prompt Digital Asset

[alm_ai_prompt_digital_asset]

Records for AI prompt assets. Prompt assets are created from the AI Control Tower workspace only, not through Service Catalog.

MCP Digital Asset

[alm_mcp_digital_asset]

Records for Model Context Protocol (MCP) server assets, including a link to the external server documentation.

AI Asset Governance Details

[sn_ai_governance_asset_governance_details]

Primary lifecycle governance record. Provides end-to-end lifecycle visibility, governance state tracking, and oversight across the Assess, Build & Test, and Deploy phases.

AI Asset Lifecycle

[sn_ai_governance_lifecycle]

Lifecycle phase definitions. AI Stewards can extend the default Assess, Build & Test, and Deploy phases by adding records to this table and updating the corresponding playbook.

AI Asset Approval Request

[sn_ai_governance_assessment_request]

Approval requests that operationalize the lifecycle defined in the AI Asset Governance Details record. Configured with Type = "AI Governance Lifecycle" and drives progression across the lifecycle phases.

AI Asset Approval Task

[sn_ai_governance_assessment_task]

Discrete governance and compliance tasks created within an approval request. Each task represents an activity across the Assess, Build & Test, or Deploy phase.

AI Asset Use and Purpose

[sn_ai_governance_asset_use_purpose]

Records the intended outcome, usage area, output type, impacted stakeholders, human involvement, interaction model, and autonomy level for each AI system. Used as input to risk classification and impact assessments.

AI System

[sn_grc_ai_gov_ai_system]

Operational AI system record used by AI Risk and Compliance. Drives risk assessments, compliance workflows, and regulatory tracking. Created when the AI Steward starts the lifecycle review for an AI system.

Evaluated sessions

[sn_ai_observe_ai_session]

Records for evaluated AI sessions. Captures cost, token counts, and quality, safety, and task completeness scores for each session.

Evaluated traces

[sn_ai_observe_ai_trace]

Records for the evaluated traces in a session. Captures cost, token counts, duration, and scores such as quality, safety, completeness, tone, and output toxicity.

Connections

[sn_aict_trace_coll_collector_config]

Connections that collect trace data from external AI platforms. Captures the credential, MID Server, collection frequency, and last collection status. Installed with the AI Trace Collector plugin.

AI Usage

[sn_ai_disc_ai_usage]

Usage records imported from hyperscaler and external AI platform connectors. Installed with the AI Discovery plugin. Consumed by the AI Control Tower value dashboard.

Business Application Product Model Map

[sn_ea_aict_ba_product_model_map]

Many-to-many association table between AI System Component Product Model records and business applications. Installed with the Enterprise Architecture for AICT plugin.

## Scheduled jobs installed
Scheduled job Description
Migrate BA Product Model Map from EA Workspace Migrates existing AI system-to-business application associations from the Enterprise Architecture Workspace map [sn_apm_ws_ba_product_model_map] to the Enterprise Architecture for AICT map [sn_ea_aict_ba_product_model_map]. Installed with the Enterprise Architecture for AICT plugin. This job doesn't run automatically. For steps, see Run the Migrate BA Product Model Map job.

Related topics

Enterprise Architecture for AICT plugin installation and upgrade considerations

Run the Migrate BA Product Model Map job

Keywords AI Control Towerinstalled componentspluginsrolestables
Search documentation
Search document titles and file paths on the brazil branch