Glean implements a comprehensive role and permission scheme for agents by default. However, you may wish to modify these permissions or make exceptions for specific users.

​
Examples of possible configurations

These controls will provide you with a range of options for how broadly you want to enable creation and sharing of agents in your deployment.
Desired outcomeConfiguration
Let a small set of users create and share agentsAssign the Agent creator role to a small set of users Set the default member permissions: Can create new agents: Off Can share and publish agents: On
Let all users create agents and tightly control which agents are shared to the libraryAssign the Agent moderator role to a small set of users Set the default member permissions: Can create new agents: On Can share and publish agents: Off Agent creators will need to ask an agent moderator to share their agent
Let all users create and share agentsSet the default member permissions: Can create new agents: On Can share and publish agents: On

​
Modify default member Agent permissions

By default, Glean enables agent creation for Default Members, but restricts them from sharing. You can change this behavior in the Default Member permissions console. Prerequisites
  • You must be an Admin.
  1. Navigate to the Admin Console > Teammates
  2. Select the Default Member permissions button
  3. Enable or disable the desired agent options:
    • Can create new Agents
    • Can share and publish Agents

​

​
Add Agent roles to an individual user

When necessary, you can assign specific Agent roles to individual users. Prerequisites
  • You must be an Admin.
  1. Navigate to the Admin Console > Teammates
  2. Select the context menu for the user you wish to modify, followed by Edit roles
  3. Under Additional roles, select the checkboxes for the agent roles you wish to add:
    • Agent Creator
    • Agent Moderator
  4. Select the Save button

​
Agent roles and permissions reference

The following table describes the roles that can interact with Agents and their default permissions:
RolePermissions
Default MemberThe ability for members to create or share agents will be governed by the Default member permissions.
Agent CreatorAllowed to create, edit, and delete their own agents. Capable of viewing anyone’s agent configurations, though editing requires proper permissions.
Agent ModeratorCan create, edit, delete, view, or share any agents, regardless of the creator. This role includes oversight capabilities to ensure compliance and effective use of agents across the organization.
AdminHolds all permissions including the ability to assign Agent Creator or Agent Moderator roles to any users. Can manage overall agent settings and permissions for the entire organization.