uipath-governance

Author, deploy, and diagnose UiPath governance policies via the uip gov CLI.

9|6|Updated Aug 25, 2017
One-click install
npx skills add https://github.com/sergueik/springboot_study --skill uipath-governance-sergueik
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: uipath-governance
Source: https://github.com/sergueik/springboot_study/tree/main/basic-uipath-skills/.github/skills/uipath-governance
Command: npx skills add https://github.com/sergueik/springboot_study --skill uipath-governance-sergueik

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires @uipath/cli, and includes scripts (resource) and references (resource) components.

What problem does it solve? Governance requests in UiPath span three distinct layers — AOps product policies, Access ToolUsePolicies, and compliance standards — and the same English sentence often maps to more than one of them. This Skill classifies each request to the correct layer first, then authors, deploys, and troubleshoots the right policy artifact without mixing branches. ## Core Features & Use Cases - AOps product policies: Block, restrict, or enforce features in Studio, StudioX, Assistant, Robot, AI Trust Layer, and Agent Builder, then deploy to users, groups, or tenants with correct precedence handling. - Access ToolUsePolicies: Control which Actor Processes and identities (User/Group) may invoke child resources such as Agents, Maestro flows, RPA workflows, and APIs, with tag-based scoping and a two-phase Spec-to-JSON authoring flow. - Compliance standards (ISO 42001): Run posture analysis, apply full or scoped recommended settings, restore drifted configurations, and handle the preview-feature 403 gate. - Diagnostics: Debug policies not taking effect, deployment precedence issues (user > group > tenant), and blocked tool invocations using deployed-policy and access-policy evaluate commands. - Use Case: A user asks to "block ChatGPT for my finance team using Studio." The Skill detects the ambiguity, asks which layer should govern the rule, then authors and deploys the correct policy with a single confirmation gate. ## Quick Start Ask the assistant to block a model, restrict a feature, or check ISO 42001 compliance posture for your UiPath tenant, and it will classify the request and guide you through authoring the policy.

Frequently Asked Questions about uipath-governance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I block a model like ChatGPT in UiPath Studio?

Blocking a model in Studio is an AOps product policy authored with uip gov aops-policy against the AI Trust Layer product. The Skill classifies the request first, since the same phrasing can also mean an Access ToolUsePolicy blocking agents that wrap the model.

What is the difference between AOps policy and Access ToolUsePolicy in UiPath?

AOps policies govern product feature behavior in Studio, StudioX, Assistant, Robot, AI Trust Layer, and Agent Builder. Access ToolUsePolicies govern whether an Actor Process may invoke a child resource such as an Agent, Flow, or RPA workflow as a tool.

How do I check ISO 42001 compliance posture for my UiPath tenant?

Run uip gov compliance-packs state coverage with your tenant ID and the iso-42001-2023 pack ID to compare configured settings against recommended ones. The tenant ID is read from ~/.uipath/.auth, and the feature requires enrollment in the preview program.

Why is my UiPath governance policy not taking effect?

Common causes are deployment precedence (user overrides group, which overrides tenant), license-type or product mismatches, and policies left in Simulated status. Use deployed-policy get for the effective merged policy rather than deployed-policy list, which only shows priority order.

Can I deny a tool invocation directly in a UiPath access policy?

No, enforcement: Deny is not authorable in ToolUsePolicy; the API rejects it. Blocking intent is expressed as an Allow policy targeting the complement set, or by using the None operator on tags or values, since Deny is the runtime default when no Allow policy matches.

What login is required before running uip gov commands?

Every uip gov command requires an active uip login session, verified with uip login status --output json. Access policy evaluate additionally requires tenant-scoped login, and tenant switching within the same org uses uip login tenant set without a full re-login.