Access Requirements for AI Agent Studio

You can give access to AI Agent Studio by assigning predefined duty roles to job roles. Also, make sure to complete these prerequisites:

  • Enable security console to work with permission groups
  • Run scheduled processes to import security data
  • Run scheduled processes to get help from the integrated AI agent
  • (Optional) Assign privilege to use external REST API tools
  • (Optional) Assign permission groups for channels

Enable Security Console to Work with Permission Groups

For the Security Console to work with permission groups and related objects, set the Enable Security Console External Application Integration (ORA_ASE_SAS_INTEGRATION_ENABLED) profile option at the site level.
  1. In the Setup and Maintenance work area, search for the Manage Administrator Profile Values task using the search link in the Search Panel Icon panel.
  2. Search for the profile option and set the value for the Site profile level to Yes.

Run Scheduled Processes to Import Security Data

To import resources from LDAP, and transfer the necessary information into the security tables of Fusion Applications, run these two scheduled processes sequentially.

  1. Import Resource Application Security Data
  2. Import User and Role Application Security Data

You must run the processes one after the other.

  1. Go to Navigator > Tools > Scheduled Processes.
  2. Click Schedule New Process.
  3. Leave the type as Job.
  4. Search for and select the process.
  5. Submit the process.

Run Scheduled Processes to Get Help from the Integrated AI Agent

You can get answers to questions about developing AI agents from the AI help agent integrated into AI Agent Studio. Using this conversational agent, you can get answers to questions about existing agents, search for agents, tools, and topics using natural language, and receive AI powered suggestions for relevant resources to use in your agents.

To use the integrated AI help agent effectively, run these two scheduled processes daily.
  • Index AI Agent Studio Assistant Documents
  • Index AI Agent Studio Assistant Objects and Attributes

Run each process using these steps:

  1. Go to Scheduled Processes, and click Schedule New Process.
  2. Leave the type as Job.
  3. Search for and select the process.
  4. Submit the process.

Assign Privilege to Use External REST API Tools

To create External REST API tools in AI Agent Studio, the Create and Edit Backends for Visual Builder Studio (ORA_FND_TRAP_PRIV) privilege must be added to the custom role assigned to the user. You can add this privilege while creating or editing a custom role.

  1. Go to Navigator > Tools > Security Console.
  2. To use a new custom role, create it. To use an existing custom role, search for the custom role and edit it.
  3. Go to the Function Security Policies page and select Add Function Security Policy.
  4. Add the Create and Edit Backends for Visual Builder Studio (ORA_FND_TRAP_PRIV) privilege to the role and save it.
  5. Save the custom role and assign to the user.

Assign Permission Groups for Channels

To create channels from Credentials tab in AI Agent Studio, additional permission groups must be added to the custom role assigned to the user. You can add these permission groups to a duty role and assign the duty role while creating or editing a custom role.
  1. Go to Security Console and create a new duty role for permission groups.
  2. Open the Permission Groups page and select Add Permission Groups.
  3. Search for and add these permission groups:
    • create:ChannelManifest
    • create:ExternalChatCorrelation
    • delete:ChannelManifest
    • delete:ExternalChatCorrelation
    • read:ChannelManifest
    • read:ExternalChatCorrelation
    • update:ChannelManifest
    • update:ExternalChatCorrelation
  4. Add security view for each permission group.
    1. Select the permission group added.
    2. In Details section, open Security Views tab.
    3. Select Add Security Views and add the AllRowsAllFields security view.
    4. Add the security view for all the permission groups.
  5. Save the duty role and assign this duty role to the custom job role.
  6. To use a new custom job role, create it. To use an existing custom job role, search for the custom job role and edit it.
    Note: Make sure to enable permission groups.
  7. Go to the Role Hierarchy page. From the Roles and Permission Groups tab select Add Role.
  8. Search for and add the duty role you've created.
  9. Save the custom role and assign to the user.

Assign Predefined Duty Roles to Job Roles

Assign predefined product-specific duty roles to the appropriate job roles, and make sure permission groups are enabled. You can give people access to configure AI agents in all or specific products.
Caution: Using predefined roles might account for subscription consumption irrespective of whether you purchased the cloud service or not. See Guidance for Assigning Predefined Roles.