Streamline Permissions for Agentforce for Service on Email

The setup process for Agentforce for Service on Email is simpler now that the Customize Application permission requirement for the Automated Case User under Support Settings is removed. Your implementation is now more secure and easier to manage.

Where: This change applies to Service Email. View required editions.

Why: Previously, the Automated Case User required the Customize Application permission to enable Agentforce to process and respond to emails automatically. Eliminating this dependency aligns with security best practices and the principle of least privilege. You no longer need to grant broad administrative access to the system user responsible for automated email actions.

How: Review the Automated Case User profile or permission set to safely remove the Customize Application permission if it was granted only for Agentforce functionality.

From Setup, in the Quick Find box, enter Support Settings, and then select Support Settings. Identify the user listed as the Automated Case User. Remove the Customize Application permission from this user.

Note
Note Make sure that the Automated Case User retains the necessary access to cases, emails, and any specific fields required for your service workflows.