An Agentforce is setting up a new org and needs to ensure that users can create and execute prompt templates. The Agentforce Specialist is unsure which roles are necessary for these tasks. Which permission sets should the Agentforce Specialist assign to users who need to create and execute prompt templates?

Salesforce uses a granular permission model for Prompt Builder to adhere to the principle of least privilege. The Prompt Template Manager permission set is specifically designed for users who need administrative control, which includes the ability to create, edit, and manage prompt templates. The Prompt Template User permission set is assigned to end-users who only need the capability to select and execute existing, approved prompt templates in their workflow. This clear separation of duties ensures that template creation is controlled while execution is broadly available to the intended users.

A. The 'Data Cloud Admin' permission set is incorrect for executing templates. It provides broad administrative access to Data Cloud, which is excessive and not the specific permission required for this user-level task.
C. The 'Data Cloud Admin' permission set is not the designated permission for creating prompt templates. The 'Prompt Template Manager' permission set is the correct and most specific permission for this administrative function.

1. Salesforce Help & Training

Give Users Access to Prompt Builder: This official documentation explicitly states the roles of the two primary permission sets.

Section: Give Users Access to Prompt Builder: "To let users create

edit

and manage prompt templates

assign them the Prompt Template Manager permission set."

Section: Give Users Access to Prompt Builder: "To let users run prompt templates

assign them the Prompt Template User permission set."

2. Salesforce Help & Training

Prompt Builder: This overview document reinforces the feature's reliance on specific permissions for governance.

Section: Prompt Builder Considerations: The document outlines the security model

implicitly supporting the use of dedicated permission sets ('Prompt Template Manager' and 'Prompt Template User') for managing and using prompt templates

rather than general administrative permissions like 'Data Cloud Admin'.