---
title: "Tab: Governance"
manual: "AI Foundation"
version: "main"
permalink: "https://docs.typo3.org/permalink/nitsan/ns-t3af:ask-ai-agent-tab-governance@main"
source: "AskAiAgent/TabsGovernance.rst"
rendered: "2026-10-13T14:11:01+00:00"
---

# Tab: Governance {#ask-ai-agent-tab-governance}

**Path:** **AI Foundation > AI Agent > Governance**

**What it shows:** the limits that apply to AI agent turns, and where each
limit is configured.

| Control | Effect on the AI agent |
| --- | --- |
| **Monthly credit cap** | Blocks turns when the group's monthly credits are used up. |
| **Daily request cap** | Blocks turns after the daily limit per backend user. |
| **Provider allowlist** | Rejects turns that request a provider that is not allowed. |
| **Model override** | Rejects a requested model when model override is not permitted. |
| **PII masking** | Redacts email addresses and phone numbers in answers. |
| **Turn guard** | Built into the AI agent: warns at 20 tool calls and stops the turn at 40 tool calls. |

**What you do here:** the tab is read-only. To change a limit:

1.  Open **AI Foundation > AI Permissions**.
1.  Select the backend user group.
1.  In step **Limits**, set the caps, the provider allowlist, model
    override, and PII masking.
1.  Under **AI Agent tools**, optionally enable
    **Read-only agent** (answers questions, prepares no changes) or
    enter **Blocked tools** as a comma-separated list, for example
    `file_delete,cache_clear`. The wildcard `*` is supported.
1.  Save the group.

> [!NOTE]
> When a user belongs to several groups, the strictest setting applies.
> See [AI Permissions](https://docs.typo3.org/permalink/nitsan/ns-t3af:ai-permissions@main).