Assign Required Permissions and Access for Setup with Agentforce (Beta)
Review access requirements for Setup with Agentforce and how to configure this access for users.
Required Editions
| Available in: Lightning Experience |
| Available in: Enterprise, Performance, Unlimited, and Developer Editions with Foundations or Agentforce 1 Editions |
| User Permissions Needed | |
|---|---|
| To enable or use Setup with Agentforce: | Review the permissions and setup steps in this topic. |
Verify Permissions to Enable Setup with Agentforce
You must have the Customize Application permission to enable Setup with Agentforce.
Assign Permissions to Use Setup with Agentforce
All users, including the admin that enabled Setup with Agentforce, must be assigned additional permissions to use the Setup agent.
-
Create a new permission set with the Use Setup with Agentforce user permission.
- From Setup, in the Quick Find box, enter Permission Sets, and then select Permission Sets.
- Click New.
- Enter your permission set information.
- Select None for the license.
- Click System Permissions, and then click Edit.
- Select Use Setup with Agentforce.
- Click Save and then confirm permission changes.
-
Assign the permission set that you created.
- At the top of the page of the new permission set, click Manage Assignments.
- Click Add Assignments.
- Select your users, including yourself if you plan to use Setup with Agentforce, click Next, and then click Assign.
-
Assign the Prompt Template User standard permission set.
- Return to the Permission Sets Setup page, and select the Prompt Template User permission set.
- Click Manage Assignments.
- Click Add Assignments.
- Select your users, including yourself, click Next, and then click Assign.
-
Assign the Data Cloud User standard permission set.
- Return to the Permission Sets Setup page, and select the Data Cloud User permission set.
- Click Manage Assignments.
- Click Add Assignments.
- Select your users, including yourself, click Next, and then click Assign.
-
Assign additional user permissions or permission sets as needed for specific tasks in
Setup with Agentforce. For required permissions, see Agentforce Capabilities in Setup
(Beta).
Note As a Salesforce security best practice, we recommend using permission sets and permission set groups to grant users only the permissions that they require. - Tell all assigned users to refresh their browsers for the permission changes to take effect.
Verify Access to the Data 360 Default Data Space
Every Data 360 org is created with a default data space. Until you create other data spaces, all Data 360 objects are mapped to the default data space.
The default data space is associated with standard Data Cloud permission sets, except the Data Cloud Architect. If you haven’t created additional data spaces or changed the default data space’s associated permission sets, no further setup is required.
- Go to Data Cloud Setup.
- Under Feature Management, click Data Spaces.
- If you only see a single data space with the name “default,” no further action is required.
-
If your data spaces were customized:
- Verify that the Setup with Agentforce data lake objects are added to the correct data space. For more information, see Add Data to a Data Space Using Data Lake Objects.
- Associate your Setup with Agentforce custom permission set with the correct data space. For more information, see Associate a Permission Set with a Data Space.
Verify Data Governance Policy
In Data 360 orgs, an "All Data Access Ruleset” policy is created by default that provides access to the Data 360 components created after Setup with Agentforce is enabled. If this policy still exists and wasn’t modified, no further setup is required.
A user with the Data 360 Architect permission set can check if a suitable Data Governance policy exists.
- In the Data 360 app, go to the Data Governance tab. If this tab isn’t available, click Edit. Click Add More Items, then click All. Search for and select Data Governance, and then click Add 1 Nav Item.
- Click Policies. If you only see a single policy named “All Data Access Ruleset,” no further action is required.
- If your policies were customized, make sure an active policy grants the Setup with Agentforce users access to query Setup with Agentforce Data 360 objects. For more information, see Policy-Based Governance in Data 360.

