Roles and responsibilities

The AI Risk and Compliance installs the essential roles to perform respective day-to-day operational tasks for managing AI assets across the enterprise.

<table id=“table_m2t_czq_mqb”><thead><tr><th>

Role title [name]

</th><th>

Description

</th><th>

Contains roles

</th></tr></thead><tbody><tr><td>

AI Risk and Compliance Admin

[sn_grc_ai_gov.ai_risk_and_compliance_admin]

</td><td>

​The AI Risk and Compliance Admin can perform the following tasks:- Set up risk and impact assessment frameworks. Configure risk assessment methodologies, risk contribution factors, and impact assessment templates. - Define automation rules for impact assessments to determine applicable risks and controls based on the assessment responses. - Set up and profile AI case types. - Delete AI systems. - Enable or disable Entity-Based Access for record types associated with entity properties, and configure the Entity-Based Access settings as needed.

Note: GRC: Entity Based Access application must be installed to use this feature.

</td><td>

• sn_smart_asmt.template_manager

• sn_grc_ai_gov.ai_risk_and_compliance_manager

• sn_smart_asmt.assessment_admin

• sn_grc_workspace.state_model_admin

• sn_smart_asmt.template_contributor

• sn_ai_case_mgmt.ai_case_admin

• sn_reg_body_mgmt.writer

• sn_risk_advanced.ara_admin

• sn_rec_pg_vertical.admin

• sn_grc_ent_access.admin

Note: GRC: Entity Based Access application must be installed for this role to be available.

</td></tr><tr><td>

AI Risk and Compliance Manager

[sn_grc_ai_gov.ai_risk_and_compliance_manager]

</td><td>

​The AI Risk and Compliance Manager can access all AI systems on the system and perform the following tasks:​- Initiate impact assessments. - Manage the life cycle of an AI system. - Initiate risk assessments. - Initiate control attestations. - Write and update access to the bulk access update configuration.

Note: GRC: Entity Based Access application must be installed to use this feature.

</td><td>

• sn_grc_ai_gov.ai_risk_and_compliance_analyst

• sn_smart_asmt.template_contributor

• sn_smart_asmt.template_manager

• sn_risk_advanced.risk_asmt_project_manager

• sn_ai_case_mgmt.ai_case_manager

• sn_grc_ent_access.bulk_access_config_admin

Note: GRC: Entity Based Access application must be installed for this role to be available.

​

</td></tr><tr><td>

AI Risk and Compliance Analyst

[sn_grc_ai_gov.ai_risk_and_compliance_analyst]

</td><td>

The AI Risk and Compliance Analyst can access all AI systems assigned to them in the system and perform the following tasks only on the assigned records:- Initiate impact assessments. - Manage the life cycle of an AI system. - Initiate risk assessments. - Initiate control attestations.

</td><td>

• sn_ai_case_mgmt.ai_case_analyst

• sn_smart_asmt.assessment_reader

• sn_smart_asmt.template_reader

• sn_grc_ai_gov.ai_risk_and_compliance_business_user

• sn_grc_ai_gov.ai_risk_and_compliance_reader

• sn_grc_workspace.user

• sn_grc_workspace.state_model_reader

• sn_risk_advanced.ara_creator

• sn_risk_advanced.ara_assessor

• sn_risk_advanced.ara_approver

• sn_risk_advanced.risk_asmt_project_user

</td></tr><tr><td>

AI Risk and Compliance Business User

[sn_grc_ai_gov.ai_risk_and_compliance_business_user]

</td><td>

The ​AI Risk and Compliance User can perform the following tasks:- Create AI case on the Employee Center. - Work on the assigned tasks. - Perform control attestations.

</td><td>

​- sn_grc_workspace.assessment_template_configuration_reader - sn_smart_asmt.actor - sn_grc_workspace.user - sn_smart_asmt.assessment_reader - sn_risk_advanced.risk_asmt_project_reader

Note: For more information on AI Control Tower roles, see AI Control Tower roles.

</td></tr><tr><td>

AI Risk and Compliance Reader

[sn_grc_ai_gov.ai_risk_and_compliance_reader]

</td><td>

​The AI Risk and Compliance Reader can have read access to the AI systems and AI impact assessments.

</td><td>

• sn_grc_workspace.user

• sn_grc_workspace.state_model_reader

</td></tr><tr><td>

AI System Reader

[sn_grc_ai_gov.ai_risk_and_compliance_ai_system_reader]

</td><td>

​The AI System Reader can have read access to the AI systems on AI Control Tower workspace and AI Risk and Compliance workspace.​

</td><td>

NA​

</td></tr><tr><td>

AI Case Business User

[sn_ai_case_mgmt.ai_case_business_user]

</td><td>

The AI Case Business User can create ​AI case and AI inquiry on the Employee Center.

</td><td>

sn_grc_case_mgmt.grc_case_business_user​

</td></tr><tr><td>

AI Case Analyst

[sn_ai_case_mgmt.ai_case_analyst]

</td><td>

The AI Case Analyst can review the AI cases and AI inquiries assigned to them in the system and perform the following tasks only on the assigned records:- Identify and manage impacted and related areas such as policies, regulations, and enterprise-wide compliance risks. - Identify and manage issues related to impacted areas to eliminate the root causes.

</td><td>

• sn_grc_case_mgmt.grc_case_analyst

• sn_ai_case_mgmt.ai_case_business_user

</td></tr><tr><td>

AI Case Manager

[sn_ai_case_mgmt.ai_case_manager]

</td><td>

The AI Case Manager can review all the AI cases, AI inquiries, and its associated information.

</td><td>

• sn_ai_case_mgmt.ai_case_analyst

• sn_grc_case_mgmt.grc_case_manager

</td></tr><tr><td>

AI Case Admin

[sn_ai_case_mgmt.ai_case_admin]

</td><td>

The AI Case Admin can manage type profiles to segregate AI cases. They can set up assignment rules and delete AI cases.

</td><td>

• sn_grc_case_mgmt.grc_case_admin

• sn_ai_case_mgmt.ai_case_manager

</td></tr><tr><td>

AI Risk and Compliance AI Agent User

[sn_airc_gen_ai.airc_ai_agent_user]

</td><td>

The AI Risk and Compliance Agent User can report issues and execute and orchestrate the AI agents as part of the lifecycle. The user can perform the following tasks:- Report a GRC issue. - Perform issue summarization. - Perform risk assessment summarization - Respond to smart assessments with Now Assist - Perform common control objective creation - Act on recommendation for similar control objectives

Note: This role must be manually assigned to an user.

</td><td>

• sn_airc_gen_ai.airc_ai_user

• now_assist_panel_user

• sn_grc_genai.issue_ai_agent_user

Note: This role is applicable only for AICT Foundation.

</td></tr><tr><td>

AI Risk and Compliance AI User

[sn_airc_gen_ai.airc_ai_user]

</td><td>

The AI Risk and Compliance User can execute GenAI skills for the following tasks:- Perform issue summarization. - Perform risk assessment summarization - Respond to smart assessments with Now Assist - Perform common control objective creation - Act on recommendation for similar control objectives

Note: This role must be manually assigned to an user.

</td><td>

• sn_grc_sharegenai.compliance_library_gen_ai_user.

• sn_grc_genai.issue_user

• sn_grc_sharegenai.risk_asmt_user

Note: This role is applicable only for AICT Foundation.

</td></tr></tbody> </table>Parent Topic:AI Risk and Compliance reference