R12 Publication-2025July16

Appendix: Privilege and PA License

Operations in AI Bot	Privilege/Requirement	PA License
Retrieve live data from device Via CLI command Config file	Access to Live Network privilege Access granted based on the defined Device Access Policy The issued CLI commands comply with Rules for CLI Command Data Retrieval in the system management	Do not require a PA license.
Execute Network Intent	The Run Network Intent privilege in the role. Access granted based on the defined Device Access Policy	Usage limits for users without PA license: During one back-and-forth interaction, if a user runs intents interactively, the intent amount is limited to 24. During one back-and-forth interaction, a user is allowed to create a scheduled task for only one home intent. During one back-and-forth interaction, a user without a PA license cannot create a scheduled task for any intent in an ADT (automation data table).
Open AI Bot Manager	AI Bot Management privilege. Note: Open CLI dictionary and config dictionary do not require this privilege. These roles include the privilege by default: Domain Admin Power User Network Change Creator Network Change Approver	Do not require a PA license.