---
schema_version: "1"
id: 611e58554493e838f3020fb465eb143dcd896dbb22ee23a6dc4f64e85ff5e15c
title: AI Agent for Privileged Access Management
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/service/264-0-0/it_srvcs_agentforce_superagent_privilegeaccessassistance.md
canonical_url: https://help.salesforce.com/s/articleView?id=service.it_srvcs_agentforce_superagent_privilegeaccessassistance.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 1a20fb0d0d8beb01a5aeb1efa2402b6c2cc1a449eab7c9659e4f0579c8c821bf
description: Privilege Access Assistance is a conversational specialized AI agent that helps employees request elevated system permissions and hardware access rights. Use this agent to request local admin privileges, turn on USB data transfer, manage time-bound access elevations, and process security exceptions. This agent ensures secure, authorized system access.
products:
  - Service Cloud
  - Agentforce IT Service
release: "264"
---
# AI Agent for Privileged Access Management

Privilege Access Assistance is a conversational specialized AI agent that helps employees request elevated system permissions and hardware access rights. Use this agent to request local admin privileges, turn on USB data transfer, manage time-bound access elevations, and process security exceptions. This agent ensures secure, authorized system access.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Enterprise</strong>, <strong>Performance</strong>, and <strong>Unlimited</strong> Editions with Agentforce IT Service.</td></tr></tbody></table>

## Service Catalog Items

This specialized agent automatically uses these SCI templates to fulfill your request. You can configure additional service catalog item templates to support similar applications and request types.

- [Request Admin or USB Access](https://help.salesforce.com/s/articleView?id=service.it_srvcs_rqst_mgmt_sci_hrdwre_admin_usb_accss.htm&type=5&language=en_US)

## Agent Actions

These actions run automatically during your conversation with the specialized agent.

- [Answer Questions with Knowledge](https://help.salesforce.com/s/articleView?id=ai.agent_ref_it_srvcs_answrplcyquestion.htm&type=5&language=en_US)
- [Get Eligible Service Catalog Items](https://help.salesforce.com/s/articleView?id=ai.agent_ref_it_srvcs_getelgblesrvcecatalogitems.htm&type=5&language=en_US)
- [Execute Service Catalog Item Flow](https://help.salesforce.com/s/articleView?id=ai.agent_ref_it_srvcs_executeservicecatalogitemflow.htm&type=5&language=en_US)
- [Get Product Launch Card](https://help.salesforce.com/s/articleView?id=ai.agent_ref_it_srvcs_getproductlaunchcard.htm&type=5&language=en_US)
- [Create Incident For Employee](https://help.salesforce.com/s/articleView?id=ai.agent_ref_it_srvcs_createincidentforemployee.htm&type=5&language=en_US)

![Example](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-service-it_service-264-0-0-production-enus/0a574a10-4c7a-4681-aacf-0767f8beaad4/images/icon_example.png)

Example

Requesting temporary admin rights for software installation

Scenario: Developer Chris needs temporary admin rights to install development tools on his laptop.

- Chris: I need temporary admin rights to install Docker and Kubernetes on my laptop for the new project.
- AI Agent: I can submit that admin rights request. To confirm before I proceed, how long do you need elevated access, and has your manager pre-approved this request?
- Chris: I need it for 24 hours, and yes, my manager Sarah Chen approved it this morning.
- AI Agent: Your temporary admin rights request has been submitted for approval by the security team. Based on the manager pre-approval from Sarah Chen, this should be processed within 30 minutes. You'll receive an email with the temporary admin password valid for 24 hours. After that period, standard user privileges will be automatically restored.