DAST

Managing access to Burp AT

• Last updated: November 5, 2026

• Read time: 2 Minutes

Give users the Use agentic testing permission to let them run agentic tests on your sites.

Giving users access to Burp AT

Of the built-in roles, only Administrator has the Use agentic testing permission. To give other users access:

1. Add the Use agentic testing permission to a custom role. The permission is under Sites in the role editor. For the steps, see Managing roles locally.
2. Assign the role to a group that contains the users. For the steps, see Managing groups locally.

The Use agentic testing permission

Use agentic testing is a site permission. Users need it on a site to create, stop and delete agentic tests on that site.

A user gets permissions from every group that they belong to. If any of those groups has a role with Use agentic testing, then the user can use Burp AT on the sites of that group. No role removes a permission that another role gives.

The Site restrictions tab of a group limits the sites that the group can test. It also limits which tests the group can see, stop and delete.

Removing access to Burp AT

To remove access for a user, remove the Use agentic testing permission from every role that the groups of the user give. Alternatively, remove the user from those groups.

Turning Burp AT on or off

An administrator can turn Burp AT on or off for the whole instance. The same setting also controls the Burp AI features.

1. Log in to Burp Suite enterprise platform as an administrator.
2. Click the settings icon , then click Burp AT.
3. Select or deselect Enable Burp AT.

When you turn Burp AT off, Burp AT stops running and queued tests and hides from the interface. Burp AT keeps your tests and schedules.

If your Burp AT license expires, then users lose access in the same way.