Salesforce Docs Portal

User Roles and Access Levels in Agentforce Operations

Assign specific roles to users that define what they can do in Agentforce Operations. You can use the system roles, or create custom roles. Grant granular access levels to blueprints and workflows.

Required Editions

License Required

This feature is a workspace that’s external to your Salesforce org and requires an Agentforce Operations license.

To purchase an Agentforce Operations license, contact your Salesforce account executive.
Role or Access Needed
To add and assign roles in Agentforce Operations: Admin role or People Admin role
To use a role in a blueprint or workflow to grant permissions in Agentforce Operations Admin role, Creator role, or Edit access for the blueprint or workflow.

About System Roles in Agentforce Operations

Agentforce Operations comes with a set of system roles you can assign to users. Use the system roles for common access patterns, or create custom roles when you want more granular control.

Required Editions

License Required

This feature is a workspace that’s external to your Salesforce org and requires an Agentforce Operations license.

To purchase an Agentforce Operations license, contact your Salesforce account executive.

Users can be assigned to multiple roles. Internal users can be assigned any system or custom role. External users can be assigned to only custom roles. Learn more about external users in Collaborating with External Partners in Agentforce Operations.

Role assignment controls workspace capabilities. Blueprint-level and workflow-level access is configured separately.

Task assignment grants task-level access only. If an assignee needs to view the full workflow, grant them workflow-level access from the Access tab.

System Roles That Come with Agentforce Operations

System Roles in Agentforce Operations
Role Access Description
Admin Full access to all features, settings, and data
Creator Build blueprints, forms, and fields
Data Source Admin Create and manage data sources in the workspace
Integration Admin Create and manage integrations
People Admin Manage people, teams, and roles
Publisher Publish blueprints

Create Custom Roles for Blueprint or Workflow Access

Create custom roles to grant blueprint or workflow access levels for users.

With custom roles, you can grant specific blueprint or workflow access levels for users. Unlike system roles, custom roles are limited to these and can’t modify other workspace settings.

  1. In the navigation sidebar, click Admin.
  2. Click the Roles tab.
  3. Click + Add role.
  4. Enter a name for the role.
  5. If you want users assigned to this role to be able to add users to the workspace, select Allow inviting people to the workspace.
  6. Click Add.
    The role is created but without granting any access level. To add blueprint or workflow access levels to a custom role, grant access from the blueprint or from the workflow's Access tab.

Assign Blueprint and Workflow Access Levels in Agentforce Operations

Get granular access control by setting access rights for each blueprint and workflow in Agentforce Operations.

Task assignees and CC'd users appear in the Access tab with no access by default. No access means they can see and complete only their assigned tasks, not the full workflow details. To give a task assignee or CC'd user workflow-level access, grant it explicitly in the workflow's Access tab or through a team or role assignment.

  1. Create a blueprint or edit an existing blueprint.
  2. In the draft blueprint, click the Access tab.
  3. To grant blueprint access levels:
    1. In the Blueprint access section, click +Grant access.
      You can't grant access to a published blueprint. Create a new blueprint version and then select the access level for the new version.
    2. For People, select the person, team, or role to grant access to.
    3. For Configure access, select the access level.
      Blueprint Access
      Access Level Description
      Draft blueprint: None No access to the draft blueprint.
      Draft blueprint: View View but not edit the specified draft blueprint.
      Draft blueprint: Make edits to the specified draft blueprint.
      Published blueprint: View Open and view the full details of the specified published blueprint.
      Published blueprint: Start workflows Start workflows from the specified published blueprint.
      Published blueprint: Create variants Create variants of the specified blueprint. Also grants View access to the published blueprint. This option shows only after you enable variants on the draft blueprint.
  4. To grant workflow access levels:
    1. In the Workflow access section, click + Grant access.
      The access level granted is for workflows created from the specified blueprint.
    2. For Grant to, select the person, team, or role to grant access to.
    3. For Configure access, select the access level.
      Workflow Access
      Access Level Description
      View View all the details for the specified workflow.
      Comment Make comments on the tasks and work log items for the specified workflow.
      Edit Make edits to the specified workflow.