This guide is for admins. By default, a person sees an Insight only if they can open every record and field it was built from. This default protects your data, but it can hide Insights from people who need them. For example, users with a Salesforce Platform license cannot open Opportunities, so they never see an Insight built from one, even when the Insight is about a Project they deliver.

System Mode lets you make some Insights visible regardless of each viewer's own record and field access. Read the risks in this guide before you turn it on.

User Mode and System Mode

You can apply System Mode in two places, depending on whether the problem is one set of data or a whole Agent:

Setting	User Mode (default)	System Mode
Access Control on a Context Source	Viewers must be able to read every record and field that this Context Source collects.	Precursive AI does not check the records and fields of this Context Source. It still checks everything else in the Insight.
Insight Access on a Zen Agent	Precursive AI checks each viewer against every record and field in the Insight.	Precursive AI shares the Agent and every Insight from it with the System Mode Viewers group of the Agent. For members, Precursive AI skips the record, field, and Agent Viewers checks. Precursive AI still checks everyone else.

Use a Context Source when one set of data causes the problem, for example Opportunity data on a Project Agent. Use the Agent setting when a known group should see all the Insights of an Agent, including in reports and AI assistants.

Neither setting changes how the Agent runs or what data it collects. Both settings change only who can see the result.

What System Mode exposes

System Mode replaces the access checks that protect your data, so it affects who can read that data across Precursive AI.

⚠️ Warning: System Mode bypasses the record and field security of your org. Get approval from the owner of your Salesforce security model first.

With System Mode, people can read AI summaries of records they cannot open, and of fields that their profile or permission sets hide. This can include sensitive data such as margins, salaries, contract values, or personal details. Before you allow System Mode, review how far the exposure goes:

• The data, not only the summary. A person who can see an Insight can also download the data it was built from with Share context. This includes everything a System Mode Context Source collected, field by field.
• Every place Insights appear. System Mode access applies in the Zen Feed, on record pages, in reports and list views, and in AI assistants connected to Precursive AI.
• Every member of the System Mode Viewers group. Members can see the Agent and every Insight from it, past and future, even if they are not in the Agent Viewers group and their own access would hide the data. Nested groups and roles in the group are included. If you add All Internal Users, everyone gets access.
• Anyone who can edit the Flow. A person who can edit the Flow of a System Mode Context Source can change what it returns, and therefore what people can see.
• Access that people already have. If someone sees an Insight while its Context Source is in System Mode, they keep access to that Insight after you turn System Mode off.

Some protections still apply:

• Precursive AI removes fields tagged with Salesforce compliance categories from the context, unless you allow those categories. See Configuring Compliance Category Filtering.
• Viewers still need a Precursive AI permission set.
• Precursive AI keeps the 10 most recent changes to the org-wide switch, with who made each change and when.
• Changing what a System Mode Context Source or Zen Agent collects needs the same permission as setting it to System Mode.
• The Access Check Log on each Insight records when Precursive AI left System Mode Context Sources out of a check.

To limit the exposure, return only the fields the Agent needs from the Flow of a System Mode Context Source. Keep the System Mode Viewers group to the people who need it. Assign the Precursive AI Allow System Mode permission set to as few admins as possible, and the Precursive AI Manage System Mode permission set only to the people who set up System Mode.

Step 1: Allow System Mode

System Mode is off until an admin allows it for the whole org. This switch lets a small number of admins decide whether anyone can use System Mode, before anyone sets a Context Source or Agent to it. You need the Precursive AI Admin permission set and the optional Precursive AI Allow System Mode permission set.

1. Open Precursive AI Settings, and then select the Data Privacy tab.
2. On the System Mode tile, select Allow.
3. In the Allow System Mode? window, read the warning, and then select Allow System Mode.

   

The tile lists every Context Source and Zen Agent set to System Mode, and shows who last changed the setting and when. View History shows the 10 most recent allow and disallow changes. Precursive AI keeps only these 10 changes, in a protected setting that nobody can edit in Setup.

Field History keeps the changes to Access Control on each Context Source and to Insight Access on each Zen Agent. Packaged field history tracking reaches new installs only, so in an upgraded org you might need to turn it on for these fields.

Step 2a: Let people see the data of one Context Source

Set a Context Source to System Mode when one Context Source collects data that some viewers cannot read, and the rest of the Insight can be checked as usual. Only Precursive AI Admin can edit Context Source records, so you need the Precursive AI Admin permission set and either the Precursive AI Manage System Mode or the Precursive AI Allow System Mode permission set.

1. Open the Context Source record, and then select Edit.
2. For Access Control, select System Mode.

   

3. Select Save.

From then on, Precursive AI leaves the records and fields that only this Context Source collects out of the viewer check, for every Insight that used it. Insights generated before your org had the Access Control setting are still checked in full. Run the Agent again to apply System Mode to them.

Precursive AI still checks the following:

• The record the Insight is about.
• The Zen Agent.
• Every User Mode Context Source on the Agent. Precursive AI checks a record collected by both a User Mode and a System Mode Context Source.
• Attached Files.

Builders can add a System Mode Context Source to Agents in User Mode. Changing what a System Mode Context Source collects, such as its Flow or its source object, needs the same permission as setting the mode. Any user with Precursive AI Admin can set it back to User Mode. When you export and import an Agent, its Context Sources arrive in User Mode.

Step 2b: Let a group see every Insight from an Agent

Set an Agent to System Mode when a known group should see all its Insights, whatever their own access. For example, delivery staff with a Salesforce Platform license can then see Opportunity and Product Insights. You need edit access to the Zen Agent and either the Precursive AI Manage System Mode or the Precursive AI Allow System Mode permission set. A Builder with Precursive AI Manage System Mode can set Zen Agents to System Mode, but not Context Sources.

1. Open the Zen Agent record, and then select Edit.
2. In the Insight Permissions section, for Insight Access, select System Mode.
3. Select Save.
4. Wait a few seconds, and then refresh the page.
5. Under System Mode Viewers, select Manage System Mode Viewers. The group for the Agent opens in Setup.

   

6. Add the users, roles, or groups that should see every Insight. The group starts empty. Add All Internal Users only if everyone should see the Insights. Adding members needs the Salesforce Manage Users permission.

Precursive AI shares the Agent and every Insight from it, past and future, with the group. Members can see them in the Zen Feed, on record pages, in reports and list views, and in AI assistants, even if they are not in the Agent Viewers group. Precursive AI checks people outside the group as usual, and Default Share Groups and email recipients still apply to them. While the Agent is in System Mode, changing its source object or filter, adding or swapping its Context Sources, or changing what those Context Sources collect also needs the permission. This stops an approved Agent from being pointed at different data.

Only users with Precursive AI Admin, Precursive AI Allow System Mode, or Precursive AI Manage System Mode can edit Insight Access, so only they can set the Agent back to User Mode.

Turn System Mode off

You can withdraw System Mode for the whole org, for one Agent, or for one person:

• To withdraw System Mode for the whole org, select Disallow on the System Mode tile. Every Context Source and Agent stops applying System Mode, and Precursive AI removes the System Mode Viewers shares.
• To withdraw the access an Agent gives, set its Insight Access back to User Mode. You need Precursive AI Admin, Precursive AI Allow System Mode, or Precursive AI Manage System Mode.
• To withdraw the access of one person, remove them from the System Mode Viewers group of the Agent.

Access that people gained through a System Mode Context Source stays in place, as described in the risks above.

Disallow does not change the Context Sources and Agents themselves. Each one keeps its setting, so if you allow System Mode again, every Context Source and Agent still set to System Mode applies it again at once.