AI Engine controls access with two permission sets that come with the package. Nobody, including a System Administrator, can use AI Engine until one of them is assigned.
The two permission sets#
| Permission set | API name | Who gets it | What it allows |
|---|---|---|---|
| AI Engine User | AI_Engine_User |
Everyone who uses AI Engine | Sales Agent chat, record actions, the AI Score card, PDFs, Magic Snap. Read access to the AI Engine configuration, and read and edit access to the four AI Score fields on Lead and Opportunity. |
| AI Engine Admin | AI_Engine_Admin |
People who configure AI Engine | Creating and changing the configuration in the Ai Agent Admin Setup tab: Org Profile, Agent Objects, Prompt Templates, AI Scoring, PDF Templates and Settings, License, Activity Monitor. |
Admins who also want to use the chat, record actions or scoring need both permission sets. Some user features, such as scoring a record and using the credential, rely on access that only AI Engine User grants.
Assign them#
- Go to Setup → Permission Sets.
- Click AI Engine User, then Manage Assignments → Add Assignment.
- Select the users, click Next, then click Assign.
- Repeat with AI Engine Admin for your admins.
You can also include the permission sets in a permission set group and assign the group.
Give the permission sets access to your AI provider credential#
Assigning the permission set is only half of the access. Each user also needs access to the principal of the External Credential that holds your AI provider key. AI Engine User and AI Engine Admin come from a managed package, so grant the principal through a permission set of your own and assign it to the same people. See Connect your AI provider, step 3.
A user who has the permission set but no principal access sees the chat, but every AI request fails.
How users count toward your license#
Your trial or license sets a user limit; during the trial it is 3 users. Every active user who holds AI Engine User, directly or through a permission set group, counts. One holder of AI Engine Admin is included; each additional admin counts as a user. If the limit is exceeded, AI actions show "User limit exceeded" with the current count and the limit. See License and trial.
Good to know#
- Use the permission sets as they are. AI Engine updates its own permission sets when you upgrade the package, for example when a new version adds a field. A cloned copy does not receive those updates, so new features can fail for users who only have the clone.
- Reporting on AI Scores. The permission sets give their holders access to the AI Score fields. Users who report on scores but do not use AI Engine, such as sales managers, need field-level security on those fields through their profile or another permission set.
- Tab visibility. The AI Engine permission sets do not include tab settings. If an admin cannot find Ai Agent Admin Setup in the App Launcher, make the tab visible in their profile or in a permission set of your own.
- A user who holds neither permission set gets an error when they use the chat, typically "AI Engine access required".