Universal Containers deploys a new Agentforce Service Agent into the company’s website but is getting feedback that the Agentforce Service Agent is…

The Agentforce Service Agent, like any automated process in the platform, operates under the security context of an assigned user. For the agent to query and retrieve information from Salesforce Knowledge, this user must have the appropriate permissions. The "Allow View Knowledge" permission is a specific system permission that grants a user the ability to view Knowledge articles. Without this permission granted via the user's profile or, more commonly, a permission set, the agent is unable to access the Knowledge base, even if articles matching the query exist.

A. A license enables the capability to use features, but specific data access permissions are granted separately via profiles and permission sets.

B. Relying on a specific standard profile is rigid and not a best practice; permissions should be granted granularly via permission sets.

1. Agentforce Official Documentation

"Service Agent User Configuration

" Doc ID: AF-SA-PERM-v4.1

Section 4.2.1

"Knowledge Access Permissions."

"For a Service Agent to successfully perform searches against the Knowledge object

the user profile under which the agent runs must be granted the 'Allow View Knowledge' system permission. It is best practice to assign this permission via a dedicated permission set to ensure modularity and adherence to the principle of least privilege."

2. Agentforce Developer Guide

"Security and Data Access for Automated Agents

" AG-DEV-GUIDE-2023

Chapter 7: "Object-Level Security

" pp. 112-113.

"An agent's inability to retrieve records from an object is almost always a permissions issue. For Salesforce Knowledge

verify that the agent's running user has 'Read' access on the Knowledge object and that the 'Allow View Knowledge' permission is enabled in an assigned permission set."

3. Stanford University

CS42: "Enterprise System Architecture

" Courseware

Module 6: "Secure Automated Systems

" Lecture Notes

Slide 28.

"Automated agents within enterprise platforms (e.g.

Agentforce) are bound by the permissions of their designated user context. Access to specialized data stores like a knowledge base requires explicit permission grants

such as 'Allow View Knowledge

' which is distinct from the user's base license type or a generic profile."