Learn about the security model for internal and external facing agents and best practices on sharing data with Agentforce.
Dreamforce passes are going fast. Don’t miss the most valuable event in business. Register now.
Register to join Dreamforce in San Francisco, or stream it free on Salesforce+.
Dreamforce is almost here and passes are going fast. Don’t miss your last chance to save $400 by September 26.
Sessions
Explore Dreamforce 2025 sessions.
Browse 1,600+ sessions from 2025 by role, topic, or industry and get inspired for the innovation coming to Dreamforce 2026.
Security Best Practices with Agentforce
Required equipment: Salesforce Events Mobile App required. Please bring your headphones and use Live Session Audio to hear audio and view captions.
, Senior Manager, APAC Developer Marketing and Programs, Salesforce
Role: Developer
Product: Agentforce
Topic: Security
Session Level: Beginner
Session Type: Theater
Session Summary: The session provided an in-depth exploration of security best practices for Agentforce, a feature built on the Salesforce platform, which respects all existing platform access controls such as licenses, profiles, permission sets, and field-level security. Key highlights included a detailed breakdown of user types—internal employee agents and external service agents—and their respective permission requirements, such as Data Cloud access and prompt template permissions, ensuring secure data handling and interaction. The session also covered advanced security protocols such as the Agentforce Trust Layer, which safeguards data, prevents prompt injections, filters toxicity, and supports agent compliance monitoring. Additionally, the use of role hierarchies, criteria-based sharing rules, and debugging tools were emphasized as critical for addressing common access issues and optimizing agent deployment.
Key Takeaways:
• Agentforce integrates seamlessly with Salesforce's unified metadata layer, inheriting existing security protocols, and offers robust access control mechanisms for both internal and external users.
• The Agentforce Trust Layer and instruction adherence functionality provide advanced safeguards, including toxicity filtering, prompt injection detection, and event logging for monitoring agent behavior and compliance.
• Admins and developers can leverage tools such as role hierarchies, criteria-based sharing rules, and debugging in user context to address common access issues and securely deploy agents tailored to business needs.
Session Summary Feedback: Report a Concern
Available Now on Salesforce+: Watch now
