Check role access for an encrypted column with Now Assist for Vault

Release version: Australia

Updated March 12, 2026

1 minute to read

Use the check role access for encrypted column skill to identify user roles that have access to encryption and decryption keys in your instance.

Before you begin

Install ServiceNow Vault. For more information, see Configuring ServiceNow Vault.
Ensure that the check role access for encrypted column skill is active. For more information, see Activate a Now Assist skill.

Role required: sn_vault_console.vault_console_admin

Navigate to All > Vault > Vault console.
In the Ask Now Assist panel, select Check role access for encrypted column and specify the details.
Example prompt: Which roles have decryption key access to an encrypted column? Access includes read access.