This guide is for admins. It explains what each Precursive AI permission set lets a person do, and which Salesforce permissions some admin tasks also need.

Permission sets

Precursive AI includes five permission sets. Give each person one of the first three, depending on how they use Precursive AI. The last two are optional add-ons that control System Mode. The following table lists what each permission set allows:

Permission set	For	What it allows
Precursive AI Standard	Everyone who reads Insights	See Insights in the Zen Feed and on record pages, give feedback, and apply recommended actions where their own Salesforce permissions allow the change. Read Zen Agent configuration.
Precursive AI Insights Builder	People who build Agents	Everything in Precursive AI Standard. Create and edit Zen Agents, but not delete them. Add the Context Sources and Actions that admins create to them. Run Check Access on Insights from Agents they can edit.
Precursive AI Admin	Precursive AI admins	Everything in Precursive AI Insights Builder. Create and edit Context Sources and Actions, see and edit every Agent, open Precursive AI Settings, configure AI providers and external connections, refresh entitlements from Precursive and review their usage, and read the access and feedback records of every user.
Precursive AI Allow System Mode	Admins who decide whether your org can use System Mode (optional add-on to Precursive AI Admin)	Allow or disallow System Mode for the org, and set Context Sources and Zen Agents to System Mode. Assign it only to the admins who approve System Mode. See Let anyone see an Insight with System Mode.
Precursive AI Manage System Mode	Admins or Builders who set up System Mode after it is allowed (optional add-on to Precursive AI Admin or Precursive AI Insights Builder)	Set Zen Agents to System Mode, and change what they collect while they are in System Mode. With Precursive AI Admin, also set Context Sources to System Mode, because only Precursive AI Admin can edit Context Sources. It cannot allow System Mode for the org.

Only Precursive AI Admin, Precursive AI Allow System Mode, and Precursive AI Manage System Mode can edit Insight Access on a Zen Agent or Access Control on a Context Source. A Builder without an add-on cannot change either field.

The Precursive AI LLM Gateway package adds two more permission sets, Precursive AI LLM Access and Precursive AI Entitlements Access. They allow the callouts to the AI and entitlement services.

Permission sets control what a person can do with records. Sharing controls which Agents and Insights they can see. See Insight sharing and access control.

Salesforce permissions for admin tasks

Some admin tasks change Salesforce sharing or groups directly, so they need standard Salesforce permissions in addition to a Precursive AI permission set. A Precursive AI permission set cannot grant these permissions. The following table lists the tasks and the permissions they need:

Task	Where you do it	Salesforce permissions needed
Add people to the Agent Viewers, Agent Builders, or System Mode Viewers group of an Agent	The Manage Viewers, Manage Builders, and Manage System Mode Viewers links on the Zen Agent record page, which open the group in Setup	Manage Users
Fix sharing for all Precursive AI objects	Precursive AI Settings > App Settings > Sharing Settings tile > Fix Sharing	API Enabled, Manage Sharing, Customize Application, and Modify Metadata Through Metadata API Functions (or Modify All Data)
Rebuild sharing for all Agents	Precursive AI Settings > App Settings > Sharing Settings tile > Rebuild Sharing	Manage Sharing
Refresh sharing for one Agent	Refresh Sharing on the Zen Agent record page	None. You need edit access to the Agent.
Check whether another user can see an Insight	Check Access on the Insight record page	Usually none. You need edit access to the Agent. If Check Access reports that it cannot read the sharing and permission records it needs, ask an admin with View Setup and Configuration to run it.

Custom permissions

The Precursive AI permission sets include custom permissions that turn on specific admin screens and actions. You do not assign custom permissions directly, but you see them when you review a permission set. The following table lists each custom permission and the permission sets that include it:

Custom permission	What it allows	Included in
Manage External Service Settings	View and change the AI provider and MCP server settings in Precursive AI Settings	Precursive AI Admin
Test External Service Connections	Test the connection to an AI provider or MCP server from Precursive AI Settings	Precursive AI Admin
Provision Entitlements	Refresh entitlements from Precursive with Refresh Entitlements, and review their usage, in Precursive AI Settings	Precursive AI Admin
Allow System Mode	Allow or disallow System Mode for the org on the Data Privacy tab	Precursive AI Allow System Mode
Manage System Mode Context Sources	Set a Context Source to System Mode, and change what a System Mode Context Source collects	Precursive AI Allow System Mode, Precursive AI Manage System Mode
Manage System Mode Zen Agents	Set a Zen Agent to System Mode, and change what a System Mode Zen Agent collects	Precursive AI Allow System Mode, Precursive AI Manage System Mode