AI policies
An AI policy is a set of access settings that controls which AI tools, agents, and BYOK providers are available to users and service accounts in your organization. Each organization has a default policy that applies to all users and service accounts with AI access.
The default policy is automatically created for every organization, and all users and service accounts with AI access are automatically assigned to it. This lets you control the availability of AI-powered features at the organization level.
You can edit the default policy, but cannot delete it or remove users and service accounts from it.
Edit a policy
In the sidebar, under AI governance, select Policies.
If you don't see this page, or the controls on this page are inactive, your role doesn't have the necessary permissions.
In the table, click the policy name to open its page. If you are already on the policy page, proceed with the next step.
On the policy page, select the tab you want to edit: General, Agents, or Tools.
Make the necessary changes on the selected tab. For all available settings, refer to Policy settings.
In the upper right corner, click Save.
In the dialog, review the summary of changes and click Save to apply them.
A success message appears in the lower right corner once changes are saved. It may take a few minutes for the changes to take effect. The duration depends on the number of users and service accounts assigned to the policy.
Policy settings
Policy settings control which AI tools, agents, and BYOK providers are available to users and service accounts under the policy. You can configure the policy settings in the corresponding tabs on the policy page.
General settings
On the General tab, the following settings are available:
Setting | Description |
|---|---|
Name | Policy name. It must be unique within your organization. |
Description | Optional description that explains the purpose of the policy. |
Cloud runs | Determines whether users and service accounts under the policy can use remote environments managed by JetBrains to run AI agent sessions. When enabled, users and service accounts are allowed to use cloud-based AI agents. Default value: enabled. |
Provider | Specifies the AI provider used for all AI-powered features. The features that don't support the selected provider's models are not available, and agents appear greyed out in the AI tools (AI Assistant and JetBrains Air). Default value: JetBrains AI. |
Agents
On the Agents tab, you can manage AI agents available to users and service accounts under the policy. By default, all agents configured at the organization level are available.
To allow the use of specific agents under the policy, toggle off All available agents and create a custom subset of agents. Click Add agent and select the desired AI agents from the dropdown.
To remove an agent from the policy, click 
in the corresponding row of the Agents table, select Remove agent, and confirm the action in the dialog.
To control whether users and service accounts can use local agents via the Agent Client Protocol (ACP), see the Tools settings.
Tools
On the Tools tab, you can configure AI tools available to users and service accounts under the policy.
AI Assistant
AI Assistant is an integrated tool in JetBrains IDEs that enhances software development with AI-powered features.
In the AI Assistant card, you can configure the following settings:
Setting | Description |
|---|---|
Third-party AI providers | Determines whether users and service accounts can use a personal API key to connect to locally installed LLMs, bypassing the organization-level AI provider configuration. This enables local Bring Your Own Key (BYOK) connections. To learn more, refer to the AI Assistant documentation. Default value: enabled. |
Custom ACP agents | Determines whether users and service accounts can use their own local agents via the Agent Client Protocol (ACP), beyond those configured at the organization level. This is separate from agents configured for the policy on the Agents tab. Default value: enabled. |
JetBrains Air
JetBrains Air is the agentic development environment designed for managing coding tasks through multiple AI agents.
In the JetBrains Air card, you can change the following setting:
Setting | Description |
|---|---|
Third-party AI providers | Determines whether users and service accounts can use a personal API key to connect to locally installed LLMs, bypassing the organization-level AI provider configuration. This enables local Bring Your Own Key (BYOK) connections. Default value: enabled. |
Principals
On the Principals tab of the policy page, you can see the users and service accounts assigned to the policy.
Since the default policy applies to every principal with AI access, the tab shows only their total number. You cannot add or remove principals assigned to the default policy.