--- schema_version: "1" id: c550d999f6e6607a1854cc10a86becea59f2baa34212bc1211933ad5263ad949 title: Set Up Permission Sets and Access for the Employee Services Portal collection: admin version: current locale: en-us portal_url: https://docs.salesforce.com/admin/current/en-us/service/264-0-0/it_srvcs_portal_permissions.md canonical_url: https://help.salesforce.com/s/articleView?id=service.it_srvcs_portal_permissions.htm&release=264.0.0&type=5 source_site: help.salesforce.com content_type: documentation content_hash: 9558401c74a1186044fca7ad78aeffa8ace809cbe1d1aded63cbf082a77d7e85 description: Before you set up your Employee Services portal site, enable the org-level features the portal depends on. Then assign employees a license and the permission sets that give them access to the IT service records and features they need. products: - Service Cloud - Agentforce IT Service release: "264" --- # Set Up Permission Sets and Access for the Employee Services Portal Before you set up your Employee Services portal site, enable the org-level features the portal depends on. Then assign employees a license and the permission sets that give them access to the IT service records and features they need. ### Required Editions
Available in: Lightning Experience
Available in: Enterprise, Performance, and Unlimited Editions with Agentforce IT Service.
## Prerequisites Complete these one-time setup tasks in your Salesforce org before you create the Employee Services portal site. They apply regardless of which template you use. - [Enable Digital Experiences](https://help.salesforce.com/s/articleView?id=experience.networks_enable.htm&type=5&language=en_US) and select a domain name. Before you save, confirm that **Allow standard external profiles for self-registration, user creation, and login** is enabled. - [Enable person accounts](https://help.salesforce.com/s/articleView?id=sales.account_person_enable.htm&type=5&language=en_US) so you can store individual employees as records. - [Set up roles](https://help.salesforce.com/s/articleView?id=platform.admin_roles.htm&type=5&language=en_US) in your Salesforce org. Most Experience Cloud licenses require roles to share records with groups of users. - [Turn on the Reports To field on the Person Account object](https://help.salesforce.com/s/articleView?id=service.es_configure_the_reports_to_field_on_person_account.htm&type=5&language=en_US) so you can associate a manager with each employee for approval workflows. After you complete these tasks, create your employee users and assign their licenses and permission sets. See [Set Up Employees for IT Services](https://help.salesforce.com/s/articleView?id=service.it_srvcs_create_emp_users.htm&release=264.0.0&type=5 "To provide a seamless service experience, you must create Employee records using the appropriate licenses and assign the necessary privileges to ensure they have the right level of access and support."). ## Licenses and Permission Sets Permission sets give employees object-level access to the IT service records and features they need. They aren't tied to a specific Experience Cloud template, so employees can sign in to either an Agentic Center or an Agentforce Employee Center portal site with either permission set. Assign each employee a license and the matching permission set. | License | Permission Set | Description | | --- | --- | --- | | Unified Employee License | **ITSM Portal Uel User** | Gives employees object-level access to manage and track IT issues and service requests. We recommend this license and permission set for all portal users. | | Customer Community Plus | **IT Service Agentic Center Portal User** | Gives employees object-level access to manage and track IT issues and service requests. Use this license for employees who haven't yet migrated to the Unified Employee License. | We recommend that you standardize on the Unified Employee License. To move your existing Customer Community Plus users, follow the steps in [Migrate Customer Community Plus Users to Unified Employee License](https://help.salesforce.com/s/articleView?id=service.it_srvcs_ccp_to_uel_migration.htm&release=264.0.0&type=5 "Migrate your existing employee users in Agentforce IT Service from Customer Community Plus (CCP) licenses to the Unified Employee License (UEL) in a single bulk operation. Run the UEL migration tool from Setup to standardize on a single licensing model and establish employees as standard Salesforce users."). ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-service-it_service-264-0-0-production-enus/0a574a10-4c7a-4681-aacf-0767f8beaad4/images/icon_note.png) Note Some features are available only to Unified Employee License users. For example, the Favorites page on the Agentforce Employee Center template isn't available to Customer Community Plus users. ## Additional Permissions To make sure your users can access Unified Catalog items and service processes, assign the required permissions. See [Request Management Permissions for IT Services](https://help.salesforce.com/s/articleView?id=service.it_srvcs_rqst_mgmt_prmsn_licenses.htm&release=264.0.0&type=5 "To set up, manage, fulfill and request IT service requests, admins, support reps, and users need specific permission sets and user permissions. With these permissions, users can access the Unified Catalog, install templates, and configure third-party integrations."). To let employees chat with the Agentforce agent on the portal, give them access to the Agentforce agent. To allow portal users to run prompt templates by using generative AI features, assign the **Prompt Template User** permission set. To let employees use the embedded AI features in the Agentforce Employee Center portal, such as Dynamic Q&A, your org needs the AI Features For Employee Portal Add On. With the add-on, assign the AI for Employee Portal permission set license to each portal user who needs AI features. To allow employees to acknowledge policies and submit evidence through the portal, assign the **IT Compliance Policy Acknowledger** and **IT Compliance Submitter** permission sets.