⚡ 1-Minute Summary Employee Agents run with the logged-in user's permissions. Service Agents have their own user. default_agent_user is required for a Service Agent and ignored for an Employee Agent. Two separate grants: Agent Access to use the agent, data access to reach the records. Module map MODULE 1 root: 'Which user is this agent, and what may it touch?' ├─ 1.1 Employee Agent vs Service Agent ├─ 1.2 Which user the agent runs as ├─ 1.3 Agent Access vs data access └─ 1.4 Designing permissions for agents Employee Agent vs Service Agent 💬 In plain words: Two agent types. One serves your staff, one serves your customers. The difference is not the skin — it is whose permissions the agent borrows, and that changes how you secure everything. 📌 Example: Meridian has two. The call-centre panel in Lightning is an Employee Agent. The chat window on meridianpower.com is a Service Agent...
Agentforce