An Agentforce Service Agent needs to access and update Case records, retrieve information from Knowledge...

Each Agentforce Service Agent operates through a dedicated agent user record in Salesforce, configured under the “New Agent User” option. The principle of least privilege should be applied—granting only the permissions needed for the AI agent to perform its defined actions, such as:

Reading/updating Case records,

Accessing Knowledge articles, and

Executing Flows relevant to its topics and actions.

This ensures secure access, especially when the AI interacts with unauthenticated sessions (e.g., guest users).

Option A is incomplete, as OWDs and filters don’t manage AI user access directly.

Option C (System Administrator) violates security best practices by granting excessive permissions.

Referenced Salesforce Materials:

Salesforce Spring ’24 Release Notes – Agentforce Service Agent: Security and User Configuration Enhancements.

Service Cloud Consultant Exam Guide – Interaction Channels Domain.

Salesforce Help: “Set Up Agentforce Service Agent Users and Permissions.”