---
schema_version: "1"
id: 86f58f3bdf19caba4237132731162a07bc634efd6a25f6a6c8a273307bb8da26
title: Common User Access for Standard Agent Actions
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/ai/264-0-0/agent_actions_common_perms.md
canonical_url: https://help.salesforce.com/s/articleView?id=ai.agent_actions_common_perms.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: e81c3b1fd280720ba076197ac3f7deb344ca5f43aa442d32b4fbb2ccb90547f8
description: Learn about the permissions required for users to run many standard agent actions.
products:
  - Agentforce
  - Cross Cloud
release: "264"
---
# Common User Access for Standard Agent Actions

Learn about the permissions required for users to run many standard agent actions.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Enterprise</strong>, <strong>Performance</strong>, <strong>Unlimited</strong>, and <strong>Developer</strong> Editions. <a href="https://help.salesforce.com/s/articleView?id=ai.agent_setup_explore_types.htm&amp;release=264.0.0&amp;type=5" title="Learn about agent types and default templates for specific clouds and common use cases.">Required add-on licenses vary by agent type.</a></td></tr></tbody></table>

## User Access to Agent Types and Templates

Different agent types and templates manage user access differently, depending on the channels the agent supports and your use case.

- [Review the requirements for your agent type](https://help.salesforce.com/s/articleView?id=ai.agent_setup_explore_types.htm&release=264.0.0&type=5 "Learn about agent types and default templates for specific clouds and common use cases.") to determine what permissions are required for users to access your agent.
    - Many agents that interact with employees are Agentforce Employee agents. You must [give your users access](https://help.salesforce.com/s/articleView?id=ai.agent_manage_aea_access.htm&release=264.0.0&type=5 "Control user access to specific Agentforce Employee agents with permission sets or profiles. In Agentforce Builder, use the Agent Access page. In the legacy Agentforce Builder, use the Agent Access tab.") to individual Employee agents.
    - Many agents that interact with customers are Agentforce Service agents. Your users don't require special permissions to interact with Service agents.
- Determine whether whether permissions should be assigned to end users, [the agent's user record](https://help.salesforce.com/s/articleView?id=ai.agent_user.htm&release=264.0.0&type=5 "Learn how Agentforce Service agents control data access. Set up an agent user for your Agentforce Service agent and assign permissions, so your agent has everything it needs to do its job."), or both.
    - Agents connected to channels that are restricted to logged-in users, such as Lightning Experience, operate in the context of the logged-in user and the user’s access controls are applied. If you’re creating an Agentforce Employee agent that connects to Lightning Experience, the Salesforce mobile app, Slack, or Enhanced Web Chat on an Experience Cloud site, assign permissions to individual users or user profiles.
    - Agents connected to channels that aren’t restricted to logged-in users, such as Messaging channels, operate in the context of an agent user, which is a Salesforce user record with all the permissions that the agent needs to do its job. If you’re creating an Agentforce Service agent that connects to Enhanced Chat or another Messaging channel, assign permissions to the agent’s user record.
- Review the documentation for your agent template and actions for any required template- or feature-specific permissions.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-ai-generative_ai-264-0-0-production-enus/f8ef6498-d7b2-44e3-9b34-ffd5a850aae9/images/icon_note.png)

Note Don’t assign permissions for creating or managing agents to end users or the agent user.

## User Access for Standard Agent Actions

These requirements apply across many standard agent actions.

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small ">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="col" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" id="d105262e135">Feature Your Agent Uses</th>
            <th scope="col" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" id="d105262e138">Required permissions</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="Feature Your Agent Uses" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d105262e135 ">Prompt templates, including those associated with agent actions</td>

            <td data-label="Required permissions" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d105262e138 ">Permission Set: Prompt Template User</td>

          </tr>
          <tr class="">
            <td data-label="Feature Your Agent Uses" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d105262e135 ">Flows, including those associated with agent actions</td>

            <td data-label="Required permissions" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d105262e138 ">
              <p>App Permission: Run Flows</p>
              <p>OR</p>
              <p>Grant access to individual flows</p>
              <p style="margin-bottom:0;">See <a href="https://help.salesforce.com/s/articleView?id=platform.flow_distribute_security.htm&amp;type=5&amp;language=en_US" target="_blank">Limit User Access to Execute Flows</a></p>
            </td>

          </tr>
          <tr class="">
            <td data-label="Feature Your Agent Uses" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d105262e135 ">Apex classes, including those associated with agent actions</td>

            <td data-label="Required permissions" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d105262e138 ">
              <p>Apex Class Access: Select the Apex classes that the agent uses.</p>
              <p style="margin-bottom:0;">See <a href="https://help.salesforce.com/s/articleView?id=platform.code_package_security.htm&amp;language=en_US" target="_blank">How Does Apex Class Security Work?</a></p>
            </td>

          </tr>
          <tr class="">
            <td data-label="Feature Your Agent Uses" class="slds-cell-wrap" rowspan="5" style="text-align:left;vertical-align:top;" headers="d105262e135 ">
              <p>Features and actions that leverage Knowledge and <span>Data 360</span>,
                such as:</p>
              <ul>
                <li>Agentforce Data Library</li>

                <li>Answer Questions with Knowledge agent action</li>

              </ul>
            </td>

            <td data-label="Required permissions" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d105262e138 ">App Permission: Allow View Knowledge</td>

          </tr>
          <tr class="">
            <td data-label="Required permissions" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d105262e138 ">App Permission: Access Conversation Entries</td>

          </tr>
          <tr class="">
            <td data-label="Required permissions" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d105262e138 ">Permission Set: Data Cloud User</td>

          </tr>
          <tr class="">
            <td data-label="Required permissions" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d105262e138 ">
              <p>Data Category Visibility: Select the data categories that include knowledge
                article data that you want your agent to use in responses.</p>
              <p style="margin-bottom:0;">See <a href="https://help.salesforce.com/s/articleView?id=service.category_visibility_whatis.htm&amp;type=5&amp;language=en_US" target="_blank">Data Category Visibility</a></p>
            </td>

          </tr>
          <tr class="">
            <td data-label="Required permissions" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d105262e138 ">Object Permissions: Following the principle of least privilege, grant access to
              the Knowledge object.</td>

          </tr>
        </tbody>
      </table>

In addition to this list, review the documentation for each action in the [Standard Agent Action Reference](https://help.salesforce.com/s/articleView?id=ai.copilot_actions_ref.htm&release=264.0.0&type=5 "Standard actions are included by default with your agents. Many standard agent actions are available to all users who have permission to access Agentforce. Other standard actions are built to work with specific clouds or products, so they require an additional license or permission. When you add a standard action to your agent, customize the action for your use case, including the underlying flow, prompt template, or other reference action.") for any template- or feature-specific licenses or permissions. Some agent actions require add-on licenses that must be assigned to each user.