service-itsm-agentic-setup-agent-runtime-access-assign

Grant a user the runtime permissions an activated ITSM agent's actions need so the actions do not...

What this skill does for you

Grant a user the runtime permissions an activated ITSM agent's actions need so the actions do not fail on permission errors. After a Fulfiller or Employee agent is activated, this skill detects which platform feature permission sets are provisioned (Prompt Templates, Data Cloud, Unified Catalog), lets you pick a tier (user/agent vs admin) per feature and which user(s) to assign, then assigns them (license first when license-gated). It also creates a custom "Agent Access" permission set granting the activated agents you choose and assigns it to the user : all via the Salesforce CLI. Use to grant a user access to an activated agent, to assign prompt-template, data-cloud, or unified-catalog access, or to create an Agent Access permission set. DO NOT TRIGGER for enabling Agentforce for IT Service toggles, creating or activating an agent, the Fulfiller activation action-surfacing gap (service-itsm-agentic-setup-itsm-agentforce-permset-assign), CMDB access, or generic permission-set assignment.

Quoted from the skill description in the pinned source

Who made it

Publisherforcedotcom

Repositorysf-skills

Installs294as of Sep 27, 2026

Use it with Edge

Set up Edge for me: read getedge.cc/SKILL.md and follow it. Then use Edge to load the service-itsm-agentic-setup-agent-runtime-access-assign skill from forcedotcom/sf-skills.

Paste it into Claude, ChatGPT, Codex or Cursor.

Or read the skill source first.

Security evidence

Security state at 2026-09-30: reviewed. State definitions. This records static evidence for this revision; live load eligibility is checked again.

3 static scans, 0 counted findings. The listed scanners recorded the results shown for this package revision.

Scanner	Date	Result
Edge static checks	2026-09-27	Pass
Cisco skill-scanner	2026-09-27	Pass
Semgrep Edge rules	2026-09-27	Pass

Static scans check the code, not how well the skill works.

Scanner scope, raw findings and mirrored provider records

Edge static checks (Edge-run): edge-static/1.0.1. Scope: Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence. Revision: d4a9aa448c7b743c1f1da41f41aa9723a6621232. Raw findings: . Counted findings: .

Cisco skill-scanner (Edge-run): cisco-skill-scanner/2.1.0. Scope: Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis. Revision: d4a9aa448c7b743c1f1da41f41aa9723a6621232. Raw findings: 2. Counted findings: .

Semgrep Edge rules (Edge-run): semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1. Scope: Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded. Revision: d4a9aa448c7b743c1f1da41f41aa9723a6621232. Raw findings: . Counted findings: .

Source and licence

Repository: https://github.com/forcedotcom/sf-skills
Pinned skill file: View source at revision
Revision: d4a9aa448c7b743c1f1da41f41aa9723a6621232
Package hash: sha256:9b2f6c4ce38deef33528776a6d4a36dcf4cdd7ad40fef7e167085bf05a1cf5b9
Licence: Apache-2.0