---
title: Configure access controls across AI Agent Studio
description: Configure access rules in AI Agent Studio for AI agents, agentic workflows, Model Context Protocol Servers, and external AI agents.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/intelligent-experiences/configure-aias-acls.html
release: australia
topic_type: task
last_updated: "2026-09-01"
reading_time_minutes: 1
keywords: [agentic AI Security, ACLs in AI agents]
breadcrumb: [Implement access control in AI Agent Studio, Configure AI Agent Studio, AI Agent Studio, Enable AI experiences]
---

# Configure access controls across AI Agent Studio

Configure access rules in AI Agent Studio for AI agents, agentic workflows, Model Context Protocol Servers, and external AI agents.

## Before you begin

Role required: sn\_aia.admin

## About this task

## Procedure

1.  Configure security controls for an AI Agent.

    To configure access rules for an AI agent in AI Agent Studio, see [Define access rules for an AI agent](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/intelligent-experiences/define-sec-aia-new.md).

2.  Configure security controls for an agentic workflow.

    To configure access rules controls for an agentic workflow, see [Define access rules for an agentic workflow](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/intelligent-experiences/define-sec-aw-new.md).

3.  Configure security controls in Model Context Protocol Servers.

    To configure security controls in Model Context Protocol Servers, see [Define security controls for MCP Servers](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/intelligent-experiences/define-sec-mcp.md).

4.  Configure security controls in external AI agents.

    To configure access rules in external AI agents, see [Create an external AI agent](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/intelligent-experiences/create-a2a-agent-new.md).


## What to do next

You can use the Access Analyzer in the Test page chat window of an AI Agent, agentic workflow, and an external AI agent. Use it to troubleshoot tools when agent execution fails due to access denial. For more information, see [Test access to an AI asset](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/intelligent-experiences/test-access-ai-asset.md).

**Related topics**  


[Granular admin roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/granular-admin-roles.md)

[Configuring user access and data permissions for agentic workflows](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/employee-service-management/cmpro-conf-users-agentic-wf.md)