Agent manager permission sets
Key Takeaway
To let a user who isn't a Salesforce admin manage an agent, assign the manager permission set for that agent type, such as "Manage Agentforce Sales Coach" or "Manage Agentforce Service Agents". Manager sets include "Manage AI Agents", which is required to open Agentforce Builder and gives management access to all agents in the org.
Agent manager permission sets let users other than Salesforce admins configure, manage and monitor Agentforce agents. Each agent type has its own manager permission set, so the right set depends on the agent the user will manage. Manager sets include the Manage AI Agents permission. Manage AI Agents is required for Agentforce Builder, and it reaches all agents in the org, not just the one named on the set.
Three roles, three permission sets
Salesforce splits access to a sales agent into three roles. Each role gets a different permission set. The table shows the sets for two sales agents: Agentforce Sales Coach and the Engagement Agent.
| Role | Who it is | Agentforce Sales Coach set | Engagement Agent set |
|---|---|---|---|
| Agent | The autonomous agent, with its own user record | Agentforce Sales Coach | Agentforce SDR Agent |
| Agent manager | A user who manages and monitors the agents | Manage Agentforce Sales Coach | Configure Agentforce SDR Agent |
| Agent user | A user, such as a sales rep, who uses the agent to support their work | Use Agentforce Sales Coach | Use Agentforce SDR Agent |
Agent managers can modify subagents and actions and customize prompt template instructions.
The names look alike, so they're easy to mix up. In the table, each manager set starts with "Manage" or "Configure". Each user set starts with "Use". The agent's own set has neither word.
The agent permission set belongs only on the agent's own user record. Don't assign it to a manager or any other user. Each sales agent needs its own user record. Give each agent user record only one agent permission set.