Access Control Overview

HCL UnO Agentic AI Builder uses role‑based access control to ensure that users can perform actions appropriate to their responsibilities. Roles determine what actions a user can perform across folders, agents, templates, and deployments.

Access is typically inherited through folder structure, ensuring consistent permissions across agents and related assets.

Understanding Access Types

The system uses the following standard permissions to control resource interaction:

  • LIST: Allows a user to view a list of available resources.

  • DISPLAY: Enables viewing or exporting the full details of a specific resource.
    Note: Having DISPLAY permission automatically grants LIST access
    .
  • ADD: Permits the creation or import of a new resource.

  • MODIFY: Allows updates and edits to an existing resource.

  • DELETE: Grants the authority to remove a resource from the system.

  • USE: Allows the user to utilize a resource within a workflow.

  • Operational Permissions: Specialized actions for AI development, including TEST (Test the agent), DEPLOY (Activate the agent), and UNDEPLOY (Take the agent offline).

Note: For more information on access and roles, refer to the UnO Security settings documentation.

Folder Access

Access control in UnO Agentic AI Builder is closely tied to the folder structure. The following table outlines the actions available based on the assigned permissions.
Table 1.
If you want to... You need this "Key" (Permission) What it actually does
See the Folder list LIST You can see the folder name on the main dashboard. Folder visibility is implied—if you have access permissions, the folder appears in the list.
Select a Folder DISPLAY You can click the Select a folder button to bring a specific UnO folder into your workspace.
Create a Folder ADD You can use the "Create" link to make a new folder that will also appear in UnO.
Change Name/Description MODIFY You can click the Pencil icon on a folder card to edit its name or description.
Delete from System DELETE You can remove the folder resource.