--- title: "Build Agent Access Control" slug: "build-agent-access-control" tags: ["administration", "unqorkai"] status: "new" updated: 2026-11-13T17:06:53Z published: 2026-11-13T17:06:53Z canonical: "docs.unqork.io/build-agent-access-control" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.unqork.io/llms.txt > Use this file to discover all available pages before exploring further. # Build Agent Access Control The Access Control administration page lets administrators decide who can use the [Build Agent](/unqorkai/docs/build-agent-overview). Access is set for the environment, for each workspace, and for each Creator role. Access is not set for individual Creators. Changes on the page save together when an administrator selects **Save Changes**. Only Designer Administrators can open this page. For other Creators, the **Access Control** item in the Settings sidebar is unavailable. The page is available only when UnqorkAI is on for the environment. To open Access Control, navigate to ![icon](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/api_upload_20261113_170651_d33560143e3e48cdbc569101b1fa3907.svg?sv=2026-02-06&spr=https&st=2026-11-14T00%3A14%3A45Z&se=2026-11-14T01%3A14%3A45Z&sr=c&sp=r&sig=NOedd4NAV9FdssVDFEurrhhDJkh19AkXARiMoxld4w4%3D) **Administration** > ![icon](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/api_upload_20261113_170651_183b673f7dad4b2bbebbe8db21d789c2.svg?sv=2026-02-06&spr=https&st=2026-11-14T00%3A14%3A45Z&se=2026-11-14T01%3A14%3A45Z&sr=c&sp=r&sig=NOedd4NAV9FdssVDFEurrhhDJkh19AkXARiMoxld4w4%3D) **Environment Settings** > ![icon](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/api_upload_20261113_170651_a6a110c210014eb49afcfe0ee19a7230.svg?sv=2026-02-06&spr=https&st=2026-11-14T00%3A14%3A45Z&se=2026-11-14T01%3A14%3A45Z&sr=c&sp=r&sig=NOedd4NAV9FdssVDFEurrhhDJkh19AkXARiMoxld4w4%3D) **Build Agent** > **Access Control**. ![[docs-interactive-image:{"surface":"admin/build-agent-access-control"}] Access Control administration page on the Roles tab, with the Build Agent environment switch, a level drop-down for each role, and Save Changes](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/api_upload_20261113_170651_cab181e9f8354fb4b3432d9fb4bad916.png?sv=2026-02-06&spr=https&st=2026-11-14T00%3A14%3A45Z&se=2026-11-14T01%3A14%3A45Z&sr=c&sp=r&sig=NOedd4NAV9FdssVDFEurrhhDJkh19AkXARiMoxld4w4%3D) ## Environment Switch The **Build Agent Access for this Environment** card at the top of the page has one switch. It controls the Build Agent for every Creator and workspace in the environment. The **Roles** and **Workspaces** tabs are below the card. | Setting | Description | | --- | --- | | **Build Agent Access for this Environment** | Turns the Build Agent on or off for the environment. The switch is on by default. When the switch is off, no Creator can use the Build Agent in any workspace, and the **Roles** and **Workspaces** tabs are hidden. Role levels and workspace switches keep their values, and **Save Changes** still saves them. The tabs and the values apply again when the switch is turned on. | ## Roles The **Roles** tab is the default tab. It lists every Creator role in the environment, including the Administrator role, with one level for each role. | Element | Description | | --- | --- | | **Search roles** | Filters the list by role name. Pressing **Enter** in the field filters the list and does not save the page. | | **Role** | The name of the role. Select the column heading to change the sort order. | | **Build Agent Level** | A drop-down for each role that sets the level. Select the column heading to sort the roles by level. | The table displays 10 roles per page. When the environment has more roles, use **Rows per page** and the page controls below the table to move through the list. The **Build Agent Level** drop-down has the following options. | Level | Description | | --- | --- | | **No Access** | Creators with the role cannot use the Build Agent. | | **Ask Only** | Creators with the role can ask the Build Agent questions about the workspace. The Build Agent cannot make changes, and checkpoint rollback is unavailable. | | **Builder** | Creators with the role can ask questions, request changes, and roll back to a checkpoint. This is the default for every role. | A Creator who holds more than one role receives the highest level of those roles. The Administrator role is a role like any other, so an administrator can set it to **No Access**. Role levels apply to Creators who hold an environment Creator role. Use the workspace switch to restrict Creators who hold only workspace roles. The level for a role is also available in the **Build Agent** field of the Creator role form. See [Creator Role Administration](/unqorkai/docs/creator-role-administration). > [!NOTE] > The **Build Agent** level is separate from the **No Access** workspace role. The workspace role controls access to a workspace. The level controls access to the Build Agent. ## Workspaces The **Workspaces** tab lists every workspace in the environment, each with its own switch. The switch controls whether the Build Agent is available in that workspace. ![[docs-interactive-image:{"surface":"admin/build-agent-access-workspaces"}] Access Control administration page on the Workspaces tab, with a search field, Enable All and Disable All, a Build Agent switch for each workspace, and Save Changes](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/api_upload_20261113_170651_d8ba5599045c46a89313d05dd860f807.png?sv=2026-02-06&spr=https&st=2026-11-14T00%3A14%3A45Z&se=2026-11-14T01%3A14%3A45Z&sr=c&sp=r&sig=NOedd4NAV9FdssVDFEurrhhDJkh19AkXARiMoxld4w4%3D) | Element | Description | | --- | --- | | **Enable All** | Turns on the switch for every workspace in the environment, not only the workspaces on the current page. The button is unavailable when every workspace switch is on. | | **Disable All** | Turns off the switch for every workspace in the environment, not only the workspaces on the current page. The button is unavailable when every workspace switch is off. | | **Search workspaces** | Filters the list by workspace name. Pressing **Enter** in the field filters the list and does not save the page. | | **Workspace** | The name of the workspace. Select the column heading to change the sort order. | | **Build Agent** | A switch for each workspace. Every workspace is on by default, including workspaces created later. Select the column heading to sort the workspaces by switch value. | The table displays 10 workspaces per page. When the environment has more workspaces, use **Rows per page** and the page controls below the table to move through the list. When the page opens, workspaces with the switch off display first, followed by workspaces with the switch on. Each group is in alphabetical order. A row stays in place when its switch changes, so the list does not move under the pointer. ## Saving Changes The environment switch, every role level, and every workspace switch save together when a Creator selects **Save Changes** at the bottom of the page. The button is unavailable until a Creator changes a setting on either tab. While the page saves, the controls are locked and the button label changes to **Saving...**. After a successful save, the page displays **Build Agent access settings have been saved.** If the save fails, the page displays a message that explains the issue. The changes stay on the page so the Creator can try again. A Creator who leaves the page with unsaved changes sees the **Unsaved Changes** dialog. The dialog has the following options: - **Save & Continue**: Saves the changes, then leaves the page. - **Discard Changes**: Leaves the page without saving. - **Cancel**: Closes the dialog and keeps the Creator on the page. Changes are recorded in the audit log after they save successfully. ## How the Settings Combine The Build Agent checks the environment switch first, then the workspace switch, and then the role level. If any of the three denies access, the Creator cannot use the Build Agent. With no saved settings, the environment switch and every workspace switch are on and every role is set to **Builder**. Upgrading an environment does not change who can use the Build Agent. ## What Creators See When access is denied or limited, the Build Agent panel reacts as follows. | Situation | What the Creator Sees | | --- | --- | | **Role is No Access** | The prompt area is replaced by **You don't have access to the Build Agent.** and a message to contact an administrator. Earlier conversations stay readable. | | **Workspace switch is off** | The prompt area is replaced by **The Build Agent is off for this workspace.** and a message to contact an administrator. | | **Environment switch is off** | The prompt area is replaced by **The Build Agent is off for this environment.** and a message to contact an administrator. | | **Role is Ask Only** | The Build Agent stays in Ask mode, and the mode toggle is locked. The Build Agent explains that it can answer questions but cannot make changes. The rollback button on a checkpoint is unavailable, with the tooltip **Your Build Agent access level doesn't allow rolling back.** | | **Access is removed during a conversation** | The next message fails and the error bar displays the denied message. | Removing access does not end a run that is already in progress. The run continues until it finishes or the Creator selects **Stop run**. After the run ends, the Creator cannot send another message. --- **Changelog** | Date | Change | | --- | --- | | 2026-10-26 | Created the article from source. | | 2026-11-03 | Described the single **Save Changes** save, the **Roles** and **Workspaces** tabs, and the unsaved changes dialog. Updated the environment switch label and the **Build Agent** navigation . | Also known as Unqork Users, or Designer Users; is anyone who is inside the Unqork platform. Also known as Unqork Users, or Designer Users; is anyone who is inside the Unqork platform.