How to Create an AI Access Policy

Set how much the people in one or more roles may use AI each day, and which providers and models they may use.

Before you start

You need the Manage AI Settings permission. See AI Security Models Explained for what a policy holds.

Steps

1. Go to Settings → Artificial Intelligence → Security Models.
2. Under Access policies, click Add policy.
3. Fill in:
   • Policy Name and Description.
   • Under Limits: Max Tokens / Day, Max Requests / Day and Max Context Length. Leave one empty for no limit.
   • Allowed Providers and Allowed Models: leave them empty to allow everything that is switched on, or pick the ones this role may use.
   • Allow Image Upload and Allow MCP Tools.
   • Role Assignments: the security roles this policy applies to.
4. Click Create policy.

What you'll see

The policy appears in the list with its limits, roles and features. It applies to everyone holding one of its roles, AI team members included, the next time they use AI. To change it, edit it and click Save policy.