---
title: Check role access for an encrypted column with ServiceNow Otto for Vault
description: Use the check role access for encrypted column skill to identify user roles that have access to encryption and decryption keys in your instance.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/check-role-access-now-assist-vault.html
release: australia
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Use generative AI skills, ServiceNow Vault]
---

# Check role access for an encrypted column with ServiceNow Otto for Vault

Use the check role access for encrypted column skill to identify user roles that have access to encryption and decryption keys in your instance.

## Before you begin

-   Install ServiceNow Vault. For more information, see [Configuring ServiceNow Vault](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/configuring-servicenow-vault.md).
-   Ensure that the check role access for encrypted column skill is active. For more information, see [Activate an AI skill](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/intelligent-experiences/configure-a-now-assist-skill.md).

Role required: sn\_vault\_console.vault\_console\_admin

## Procedure

1.  Navigate to **All** > **Vault** > **Vault console**.

2.  In the ServiceNow Otto panel, select **Check role access for encrypted column** and specify the details.

    Example prompt: `Which roles have decryption key access to an encrypted column? Access includes read access.`


**Parent Topic:**[Use generative AI skills in ServiceNow Otto for Vault](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/using-now-assist-vault.md)