# Agents (/docs/reference/roles-permissions/agent)



Agent operation permissions are baseline tenant-member capabilities. Access to an existing Agent configuration additionally depends on its resource relationship.

| Resource relationship | Access                                                     |
| --------------------- | ---------------------------------------------------------- |
| Viewer                | Read and use the Agent                                     |
| Editor                | Viewer access plus editing                                 |
| Owner                 | Editor access plus deletion and sharing                    |
| Grant manager         | Manage sharing; this is not a general content-editing role |

A tenant-administrator assignment does not make its holder the owner of every Agent. Sharing operations use the [Authorization family](/docs/reference/roles-permissions/authorization).

## Permissions [#permissions]

This family contains **6 permissions**. “Baseline member” means every current tenant member already has the operation permission, including members with any system role. It does not bypass the resource checks described above. “Custom role” means the identifier can be selected when defining a custom role.

<Catalogue>
  <details className="catalogue-entry">
    <summary>
      ### agent.configuration.create [#agentconfigurationcreate]

      <span className="catalogue-description">
        Create an Agent configuration; the creator becomes its owner.
      </span>
    </summary>

    <div className="catalogue-content">
      Create an Agent configuration; the creator becomes its owner.

      | Property     | Value                                                                                                                                                                                  |
      | ------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
      | Scope        | Selected tenant                                                                                                                                                                        |
      | Granted by   | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership)                                                                                           |
      | Custom role  | Yes                                                                                                                                                                                    |
      | Also implies | [agent.configuration.list](/docs/reference/roles-permissions/agent#agentconfigurationlist), [agent.configuration.read](/docs/reference/roles-permissions/agent#agentconfigurationread) |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### agent.configuration.delete [#agentconfigurationdelete]

      <span className="catalogue-description">
        Delete an Agent configuration owned by the caller.
      </span>
    </summary>

    <div className="catalogue-content">
      Delete an Agent configuration owned by the caller.

      | Property     | Value                                                                                                                                                                                                                                                                                  |
      | ------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
      | Scope        | Selected tenant                                                                                                                                                                                                                                                                        |
      | Granted by   | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership)                                                                                                                                                                                           |
      | Custom role  | Yes                                                                                                                                                                                                                                                                                    |
      | Also implies | [agent.configuration.list](/docs/reference/roles-permissions/agent#agentconfigurationlist), [agent.configuration.read](/docs/reference/roles-permissions/agent#agentconfigurationread), [agent.configuration.update](/docs/reference/roles-permissions/agent#agentconfigurationupdate) |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### agent.configuration.list [#agentconfigurationlist]

      <span className="catalogue-description">
        List Agent configurations visible to the caller.
      </span>
    </summary>

    <div className="catalogue-content">
      List Agent configurations visible to the caller.

      | Property     | Value                                                                                        |
      | ------------ | -------------------------------------------------------------------------------------------- |
      | Scope        | Selected tenant                                                                              |
      | Granted by   | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership) |
      | Custom role  | Yes                                                                                          |
      | Also implies | [agent.configuration.read](/docs/reference/roles-permissions/agent#agentconfigurationread)   |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### agent.configuration.read [#agentconfigurationread]

      <span className="catalogue-description">
        Read an Agent configuration that the caller owns or can view.
      </span>
    </summary>

    <div className="catalogue-content">
      Read an Agent configuration that the caller owns or can view.

      | Property    | Value                                                                                        |
      | ----------- | -------------------------------------------------------------------------------------------- |
      | Scope       | Selected tenant                                                                              |
      | Granted by  | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership) |
      | Custom role | Yes                                                                                          |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### agent.configuration.update [#agentconfigurationupdate]

      <span className="catalogue-description">
        Edit an Agent configuration with resource-level write access.
      </span>
    </summary>

    <div className="catalogue-content">
      Edit an Agent configuration with resource-level write access.

      | Property     | Value                                                                                                                                                                                  |
      | ------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
      | Scope        | Selected tenant                                                                                                                                                                        |
      | Granted by   | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership)                                                                                           |
      | Custom role  | Yes                                                                                                                                                                                    |
      | Also implies | [agent.configuration.list](/docs/reference/roles-permissions/agent#agentconfigurationlist), [agent.configuration.read](/docs/reference/roles-permissions/agent#agentconfigurationread) |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### agent.configuration.use [#agentconfigurationuse]

      <span className="catalogue-description">
        Use an accessible Agent configuration in an AI interaction.
      </span>
    </summary>

    <div className="catalogue-content">
      Use an accessible Agent configuration in an AI interaction.

      | Property    | Value                                                                                        |
      | ----------- | -------------------------------------------------------------------------------------------- |
      | Scope       | Selected tenant                                                                              |
      | Granted by  | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership) |
      | Custom role | Yes                                                                                          |
    </div>
  </details>
</Catalogue>

## Related pages [#related-pages]

* [Roles and permissions catalogue](/docs/reference/roles-permissions)
* [System roles and baseline access](/docs/reference/roles-permissions/system-roles)