Managing agent access

Admins have granular control over how users can share agents. They determine how much agent access an audience gets on a per-agent basis.

Prerequisite

Have the Admin role to manage agent access. See About Role Based Access Control (RBAC) for more information.

Agent access tiers

When someone shares an agent with an audience, they can give the audience different levels of access. Only agent owners, moderators, and Admins can assign owner access.

note

By default, unshared agents are only visible to Admins, agent moderators, and the agent creator.

The following table shows capabilities that each level of access grants.

Level of access to agent	Can see agent in library	Can run agent	Can edit agent	Can delete agent
Not in sharing audience	No	No	No	No
Viewer	Yes	Yes	No	No
Editor	Yes	Yes	Yes	No
Owner	Yes	Yes	Yes	Yes

Agent roles

Admins can assign agent roles to govern agent deployment. These roles have certain privileges:

Role	Can see agent in library	Can run agent	Can edit agent	Can delete agent	Can disable agent
Default user	Only if in sharing audience	Only if in sharing audience	Only if has “editor” access or higher	Only if has “owner” access or higher	No
Department agent moderator	Yes, for agents created by members of assigned department(s)	Yes, for agents created by members of assigned department(s)	Yes, for agents created by members of assigned department(s)	Yes, for agents created by members of assigned department(s)	Yes, for agents created by members of assigned department(s)
Agent moderator	Yes	Yes	Yes	Yes	Yes
Admin	Yes	Yes	Yes	Yes	Yes

Configuring agent sharing for default users

To modify default user permissions, follow these steps:

1. Navigate to the Admin Console → Users page.
2. Select the Default Member permissions button
3. Configure the following agent options for default users (any Glean user without an assigned role):
   • Can create agents (default On)
   • Can publish agents (default Off)
   • Can share agents with individual teammates (default On)
   • Can share agents with Departments (default Off)
   • Can share agents with Identity Provider groups (default Off)
   • Can share agents with the entire company (default Off)

When someone shares an agent, an agent editor can specify what level of access the agent receivers get: viewer, editor, or owner. Only agent owners, agent moderators, and Admins can assign owner access to an agent.

Assign agent roles

Admins can assign agent roles to any user:

1. Navigate to the Admin console → Users page.
2. Select the context menu for the user you want to assign an agent role to.
3. Click Edit roles to open the Edit role dialog.
4. For the Additional roles section, select the agent roles you want to add:
   • Agent Creator
   • Agent Moderator
   • Departmental Agent Moderator (Select at least one department)
5. Click Save to apply the changes.