Data 360 permissions for retriever-grounded prompt templates
Key Takeaway
Prompt template permissions don't cover retrievers. Data 360 permission sets control access to retrievers and their data, and the best practice is to give each user the minimum permissions they need.
A prompt template can use a retriever to search knowledge indexed in Data 360 and add the relevant results to the prompt to ground the LLM's response. Because that knowledge lives in Data 360, Data 360 permission sets control access to retrievers and their data. These permission sets are separate from the permissions that let someone build prompt templates in Prompt Builder.
What a retriever does and where you create it
A retriever searches knowledge that is indexed in Data 360 and returns relevant results to a prompt template. For example, a retriever can return knowledge article chunks or similar case chunks.
Where you create a retriever depends on its type. You create individual and ensemble retrievers in AI Models (formerly Einstein Studio). You create web retrievers in Agentforce Data Library instead. After you create a retriever, you add it to a prompt template as a resource in Prompt Builder.
You can check what a retriever actually returned with "Preview Resolution" in Prompt Builder, which shows the retrieved data in JSON format.