{"resourceId":"servicenow-access-analysis-agent-brazil-20261105","versions":[{"version":"external-16d5cf92acd7274c233434fbec2d2b7f2bc21143f658c89d340aa33f3e976b01","resource":{"id":"servicenow-access-analysis-agent-brazil-20261105","title":"Introducing the Access Analysis Agent: Your Quick Answer to \"Can This User Access This?\"","organization":"ServiceNow (Community article by ServiceNow employee)","sector":"Enterprise platform security/administration; applies to ServiceNow customers including public sector","geography":"Global","publishedAt":"2026-11-05 (posted ~7 hours before retrieval)","publicationDate":"2026-11-05","eventDate":"2026-11-05","sourceName":"ServiceNow Community (ServiceNow AI Platform blog)","sourceLabel":"Vendor employee community product announcement","sourceUrl":"https://www.servicenow.com/community/servicenow-ai-platform-blog/introducing-the-access-analysis-agent-your-quick-answer-to-quot/ba-p/3618499","evidenceClass":"vendor-claim","outcomeClass":"emerging","topics":["developers-agents","data-security","governance-procurement"],"finding":"In the Brazil release, ServiceNow introduced an Access Analysis Agent in the ServiceNow Otto panel that answers natural-language questions about whether a user, group, or role can access tables, records, AI agents, or agentic workflows. Results are Passed, Blocked, or Undefined, naming the blocking ACL, role, security attribute, or condition, and flagging scripts that need manual review. Results are logged in Access Analyzer. Available to admins/security with access_analyzer_admin or user_admin. Corroborated in Access Analyzer Brazil release notes and the ServiceNow Store listing (Paid; Compatibility: Brazil; scope sn_acl_ai_agents).","sledRelevance":"Directly relevant to state/local, university and K-12 ServiceNow platform teams that must evidence least-privilege access for AI agents and agentic workflows under audit. Conversational ACL investigation can shorten access reviews during Brazil upgrades. No government customer is cited; effectiveness and accuracy are unvalidated outside vendor materials.","evidence":"Vendor-employee community post dated 2026-11-05; corroborating Access Analyzer release notes and Store app page inspected. No independent evaluation, accuracy rates, or public-sector deployment evidence.","architectureImplications":"Agent sits on Access Analyzer engine inside the Otto/Now Assist panel; can use current page context and evaluate access to AI agents and agentic workflows as resources. Store app scope sn_acl_ai_agents; Paid; Brazil-compatible.","governanceImplications":"Supports audit and recertification workflows by logging evaluations in Access Analyzer, but does not itself change ACLs. Agencies still need policy on who may run evaluations and how results feed access reviews.","securityPrivacyImplications":"Helps find over-permissioned or blocked access including on AI agents; does not remediate October AI Platform CVEs. Role gating (access_analyzer_admin/user_admin) matters because the agent reveals ACL and condition details.","caveats":"Vendor claim only; Paid Store app; accuracy of conversational ACL answers not independently measured; no SLED deployment cited.","streamIds":["servicenow"],"roles":{"sales":"Lead with auditability of AI-agent permissions, not chat novelty. For SLED platform owners upgrading to Brazil, the Access Analysis Agent is a concrete way to ask whether a role can touch an AI agent or workflow and get a named ACL answer. Evidence is vendor-only and the Store app is Paid, so frame a short access-review readiness conversation rather than promising faster audits. Do not claim it closes CVE findings.","engineering":"Fit requires Brazil, Access Analyzer, and access_analyzer_admin or user_admin. Engineers should confirm the sn_acl_ai_agents Store app entitlement, map which identities may invoke the agent, and test questions against known ACL fixtures including AI agent and agentic workflow resources. Treat scripted-ACL flags as manual review work. Validate that evaluation results land in Access Analyzer logs suitable for audit trails before relying on the conversational path in production support.","delivery":"Delivery work is a Brazil-upgrade access-ops pilot: script a fixed set of user role and resource questions including AI agents, compare agent answers to Access Analyzer baselines, and decide ownership of evaluation logs. Interpretation: acceptance is agreement rate against known fixtures, not ticket deflection. Security and platform teams co-own the pilot. Main risk is over-trusting conversational answers on scripted ACLs without required manual review."},"roleDetails":{"sales":{"customerProblem":"Platform and security teams struggle to evidence who can access AI agents and sensitive tables during audits and Brazil upgrades.","stakeholders":["ServiceNow platform owner","CISO","Internal audit","Identity/IAM lead"],"discoveryQuestions":["Are you on or planning Brazil?","Do you already license Access Analyzer and the Access Analysis AI Agents Store app?","How do you today prove access to AI agents and agentic workflows?","Who holds access_analyzer_admin or user_admin?"],"valueHypothesis":"If ACL investigations dominate upgrade and audit cycles, a conversational Access Analyzer front-end may shorten discovery time; magnitude unproven in SLED.","potentialEngagement":"A bounded access-review readiness assessment tied to Brazil upgrade planning.","unsupportedClaims":["The agent is independently accurate on all ACL types","It remediates recent ServiceNow AI Platform CVEs","It is included at no extra cost for all customers"]},"engineering":{"fit":"Fits Brazil instances with Access Analyzer and entitlement to Access Analysis AI Agents.","architectureIntegration":"Otto/Now Assist panel agent calling Access Analyzer; evaluates tables, records, fields, Script Includes, UI pages, AI agents, agentic workflows.","prerequisites":["Brazil release","Access Analyzer","access_analyzer_admin or user_admin","Store app entitlement if required"],"constraints":["Paid Store listing","Scripted ACLs may need manual review","No independent accuracy data"],"security":"Limit who can run evaluations; treat results as sensitive configuration intelligence; do not substitute for CVE patching.","proofOfValue":["Agreement rate vs known ACL fixtures","Evaluations logged in Access Analyzer","Correct identification of blocking ACL on AI agent resources"]},"delivery":{"work":"Pilot conversational access questions against a fixture set during Brazil upgrade; document gaps on scripted ACLs.","dependencies":["Brazil upgrade window","Security reviewers","Store/licensing confirmation"],"ownership":"Platform team with security sign-off.","skillsAdoption":"Train admins on question patterns and when to fall back to Access Analyzer/Simulator.","governanceCheckpoints":["Role assignment review","Evaluation-log retention","Change process for ACL fixes"],"acceptanceCriteria":["Proposed: >=95% agreement with known fixtures","Proposed: AI-agent resource checks included in the fixture pack"],"risks":["False confidence on scripted ACLs","Unlicensed Store app","Over-broad admin role assignment"]}},"retrievedAt":"2026-11-06T04:08:00Z","enrichedAt":"2026-11-06T04:14:10Z","enrichmentBasis":"retrieved source","accessibilityWorkforceImplications":"Reduces manual ACL digging for platform admins; still requires security skill to act on results and review scripted ACLs the agent flags.","procurementImplications":"Store lists the Access Analysis AI Agents app as Paid and Brazil-compatible; confirm entitlement and licensing before assuming it ships with base Access Analyzer.","operatingModelImplications":"Access troubleshooting and AI-agent permission reviews become conversational tasks for designated admins, with Access Analyzer as the system of record for evaluation logs.","sourceVerification":{"openedUrl":"https://www.servicenow.com/community/servicenow-ai-platform-blog/introducing-the-access-analysis-agent-your-quick-answer-to-quot/ba-p/3618499","referenceExcerpt":"The Access Analysis Agent launched in the Brazil release.","promptVersion":"sled-research-v4.0","model":null,"basis":"agent-reported inspection"}}}]}