You are here:
Collaborating with External Partners in Agentforce Operations
Invite suppliers, vendors, and other external partners to participate in your workflows in Agentforce Operations. External users can complete tasks through email, forms, or the workspace, with visibility restrictions that protect workspace data.
Required Editions
| License Required |
|---|
This feature is a workspace that’s external to your Salesforce org and requires an Agentforce Operations license. To purchase an Agentforce Operations license, contact your Salesforce account executive. |
Internal Users Compared to External Users
Every user in an Agentforce Operations workspace has an user type: internal or external. The user type controls what a user can see and do in the workspace.
- Internal users
- Typically employees of your organization. Internal users can see the identities of all other users in the workspace, see all unrestricted data (such as data source contents and the catalog of defined integrations), and can have view or edit access levels on resources, such as blueprints or workflows. Internal users can have any system or custom role.
- External users
- Typically suppliers, vendors, or other partners. External users have restricted visibility in the workspace and can't have system roles. They can view workflows and tasks you've given them explicit access to, but they can't view blueprints or the full list of people in the workspace. External users can join teams.
What External Users Can Do
- Complete tasks through email or web forms without signing in.
- Log in to the workspace to view and complete tasks you've assigned to them.
- Comment on tasks you've assigned to them or cc'd them on.
- Have custom roles.
What External Users Can't Do
- See unrestricted data in the workspace, such as the full catalog of data sources or integrations.
- Have system roles, such as Admin, Creator, Publisher, Data Source Admin, Integration Admin, or People Admin.
- Have edit access to workflows or blueprints.
- See other users in the workspace unless they have an association with them.
User Association and Visibility
External users represent external parties such as potential suppliers, so it's crucial that they can't discover each other in the workspace. External users can see or query for another user only if they have an association with them.
Two users have an association in either of these cases:
- Previous collaboration: You've assigned both users to the same task or cc'd them on the same task.
- Matching email domains: Their email addresses share the same domain.
- If multiple external suppliers have email addresses at a public domain like
gmail.com, Agentforce Operations treats them as associated, so they can see each other. - If your business practices involve creating email addresses at one of your own domains for external suppliers, those suppliers can see any other users in the workspace who share that email domain.
When you grant an external user access, use distinct domains for each supplier organization whenever possible.
Ways External Users Complete Work
External users can participate in workflows through multiple channels:
- Reply to the notification email to complete tasks, post comments, approve or reject approval tasks, or attach files. External users can click action buttons in the email body without signing in.
- Web form
- For tasks that require complex structured data, external users receive a Complete Form link in an email. The link opens a restricted browser view where they can complete the form. Agentforce Operations uses device verification for security, and limits the external user's access to reading and writing data only for that specific form.
- Workspace
- External users can log in to the workspace to view and complete the tasks you've assigned to them. They can see only the workflows and users that they have an association with.
