Getting Started With Agents: Agent Access Control - Permissions and Profiles (2025)
Agent access control in Business Central: the sales order agent's access is defined by permissions and profiles like any other user. Administrators can customize the pre-built profile and permission set, use agent log entries to troubleshoot issues such as missing permissions (disabling the agent before adding permissions), and manage which users can access the agent pane.
- How Sales Order Agent Works
- Agent Access Control Overview
- Agent Profiles and UI Access
- Agent Permissions and Configuration
- Using Agent Log Entries for Troubleshooting
- Managing Agent Users and Access
- Summary: Administrator Control
Overview
The video explains that the sales order agent shares the same attributes as any other Business Central user, so its access is defined by permissions and profiles. It uses UI elements to work out the steps it needs, which means the pages and controls in its profile determine what it can do.
It walks through the pre-built agent profile and permission set, how to customize them, and how to use agent log entries to find permission problems. It also covers adding users who can review and approve agent steps in the agent pane, and granting or revoking the ability to manage agent configuration. The closing message is that administrators stay in full control of the agent’s access.
Key points
- The agent has the same attributes as any other user, and its access is set by permissions and profiles.
- A pre-built profile ships with the agent. You can customize it by adding or removing pages, actions and other controls as needed.
- You can switch to the assigned profile to verify which pages and controls the agent can reach.
- A pre-built permission set is provided to get started. Review it and modify it as needed.
- AppSource apps or customizations that extend the process may need extra permissions, and the agent may hit permission errors without them.
- Agent log entries show the pages the agent navigated to, the actions it invoked and the issues it hit. Disable the agent before adding permissions to fix issues, then enable it again.
- Administrators can add users who access the agent pane to review and approve steps, and can grant or revoke the right to manage agent configuration.
Features
Every feature below: status not stated, demoed.
| Feature | At |
|---|---|
| Sales Order Agent | 0:03 |
| Agent Profile Customization | 0:59 |
| Agent Permission Sets | 1:24 |
| Agent Log Entries | 2:01 |
| Agent User Management | 2:37 |
AL objects mentioned
As heard in the captions. A name that matches one object page by exact type and name links to it; the others stay as named.
- page 4315 “Agent Card” at 0:47
- other “agent log entries” at 2:01
Quotes
- 0:03 “Sales order agent is designed to use AI to perform its tasks while keeping users informed about key steps.”
- 0:47 “The agent shares the same attributes as any other user in Business Central. Its access is also defined by permissions and profiles.”
- 1:10 “The agent comes with a pre-built profile out of the box, and you can easily customize it, adding or removing pages, actions, and other”
- 1:24 “The sales order agent comes with a pre-built permission set to help you get started quickly.”
- 2:01 “Agent log entries give you a complete overview of the steps the agent performed while working on a task, including the pages it navigated”
- 2:16 “To fix this, you’ll first need to disable the agent before adding the required permissions.”
- 2:58 “With agent permissions and profiles, Business Central administrators stay in full control of the agents access.”
Disclaimers in the video
- 1:37 other: Your version of Business Central may include additional app source apps or customizations that extend the process orchestrated by the agent.