AI Tool Permissions Guide for Agent Risk Manager

Use AI Tool Permissions in Agent Risk Manager to approve, warn users about, or block the AI websites your users open in their browsers. This article explains AI Tool Permissions and how to access them, review and manage AI tools, and configure redirects and messages.

For general information about Agent Risk Manager, see our Agent Risk Manager Overview.

Prerequisites

Before you begin, make sure you have deployed the KnowBe4 Browser Extension to your users. For installation instructions, go to Agent Risk Manager > Setup > Integrations, select Add New Integration, and then select the KnowBe4 Browser Extension (Intune) card.

You can set permissions without the KnowBe4 Browser Extension, but they don't apply to users until the extension is deployed to their devices.

How AI Tool Permissions Work

AI Tool Permissions lets you govern which AI websites your users can open in their browsers. The KnowBe4 Browser Extension enforces these permissions, so they apply only to users who have the extension deployed. AI Tool Permissions doesn't block or restrict the agents and tools that Agent Risk Manager discovers through your integrations.

Each AI tool has one of the following tiers:

• Approved: Users can use the AI tool.
• Warn: Users see a caution message and can continue to the AI tool.
• Blocked: Users can't open the AI tool. Instead, they're offered your approved alternatives. If you turn on auto-redirect, they're sent to the top alternative automatically. If a blocked AI tool has no alternatives, users see only the block message.

You can also set up redirects and customize the messages that users see for warn and blocked AI tools.

Access AI Tool Permissions

How you access AI Tool Permissions depends on whether you use the classic KnowBe4 console or the KnowBe4 Platform. Follow the steps in the matching subsection.

Classic KnowBe4 Console

To access your AI Tool Permissions from the classic KnowBe4 console, follow these steps:

1. Log in to your classic KnowBe4 console.
2. In the top-left corner of the screen, select the grid icon. A drop-down menu will display.
3. In the drop-down menu, select Agent Risk Manager.
4. In the sidebar, select Policies, then select AI Tool Permissions.

KnowBe4 Platform

To access your AI Tool Permissions from the KnowBe4 Platform, follow these steps:

1. Log in to your KnowBe4 Platform.
2. In the sidebar, select Agent Risk Manager.
3. Under Policies, select AI Tool Permissions.

Review Your AI Tools

In the AI Tool Permissions page, the AI Tool Registry lists the AI websites that Agent Risk Manager knows about and the tier each one has. Three tiles show the number of Approved, Warn, and Blocked AI tools in the whole registry.

To narrow the table, use the following filters:

• Search: Search by name, vendor, or domain.
• Tier: Show All tiers, Approved, Warn, or Blocked AI tools.
• Redirect: Show All tools or Redirect targets only.

The table includes the following columns:

• Tool: The name of the AI tool, with the vendor beneath it.
• Pattern / Selectors: The domain or pattern that identifies the AI tool.
• Tier: The tier that the AI tool has.
• Redirect: A toggle that sets whether the AI tool is one of your redirects. A redirect is an Approved AI tool that you offer as an alternative to Blocked AI tools. This toggle doesn't send users away from that AI tool.

Manage AI Tools

From the AI Tool Registry, you can change an AI tool's permission, add an AI tool, or remove an AI tool. For more information, see the subsections below:

Change an AI Tool's Permission

To change an AI tool's configuration, follow the steps below:

1. In the AI Tool Registry table, locate the AI tool.
2. Select the Edit tool (pencil) icon for the AI tool. An Edit panel will display.
3. In the panel, make your changes, then select Save.

Add an AI Tool

If an AI website isn't in the registry, you can add it as a custom AI tool. To add an AI tool, follow the steps below:

1. In the AI Tool Registry table, select Settings, then select Add AI Tool. The Add AI Tool panel will display.
2. In the Tool name field, enter a name for the AI tool.

3. In the Vendor field, enter the name of the AI tool vendor.

   Note:If you leave the Vendor field empty, Agent Risk Manager uses the AI tool name as the vendor.
4. In the Domain pattern field, enter the bare hostname of the AI tool, with no "https://" and no path. For example, "www.example.com".
5. In the Tier drop-down menu, select Approved, Warn, or Blocked.
6. In the Block message or Warning message field, you can also add a custom message for users. If you leave this field blank, Agent Risk Manager uses the matching default message.
7. Select Add tool.

Remove an AI Tool from the Registry

To remove one AI tool, select the trash can icon at the end of its row. To remove several AI tools, select their checkboxes, select Set Tier, then select Remove tools from registry. After you remove an AI tool, an Undo option displays. Select Undo to restore the AI tool.

Configure Redirects and Messages

From the AI Tool Registry, you can set up AI tool redirects or customize warning and block messages. For more information, see the subsections below:

Set Up AI Tool Redirects

When a user opens a Blocked AI tool, Agent Risk Manager can offer the user your approved alternatives. A redirect is an Approved AI tool that you offer as an alternative to Blocked AI tools. The Redirect toggle in the AI Tool Registry table marks an AI tool as one of your redirects.

Choose Redirects

You can add up to three redirects. To choose your redirects, follow the steps below:

1. In the AI Tool Registry table, select Settings, then select Redirect. The AI Tool Settings drawer displays.
2. To add a redirect, select the + chip with the AI tool's name. Drag a row by its handle to set the priority of your redirects. The redirect with the Primary label is the top route.
3. Select Save settings.

To stop offering an AI tool as a redirect, turn off its Redirect toggle in the AI Tool Registry table.

Set Up Automatic Redirects

By default, users choose from your redirects. To send users to a redirect automatically, follow the steps below:

1. In the AI Tool Registry table, select Settings, then select Redirect.
2. To send users who open a Blocked AI tool to the top redirect after a set amount of time, turn on Auto-redirect to top alternative. In the Auto-redirect delay field, enter how many seconds should pass before users are redirected.
3. To send users who open a Warn AI tool to a redirect instead of the caution message, turn on Auto-redirect on warn tools.
4. Select Save settings.

Customize Warning and Block Messages

You can set the messages that users see when they open a Warn or Blocked AI tool. To set a default message for all AI tools, follow the steps below:

1. In the AI Tool Registry table, select Settings, then select Messages. The AI Tool Settings drawer displays.
2. In the Default warn message field, enter the message that users see when they open an AI tool set to Warn.
3. In the Default block message field, enter the message that users see when they open an AI tool set to Blocked.
4. Select Save settings.

To set a message for one AI tool, select the pencil icon for the AI tool. In the Warning message or Block message field, enter the message, then select Save. If you leave a field blank, the AI tool uses the default message. If you also leave the default message blank, users see the built-in message from the KnowBe4 Browser Extension.