An administrator at Universal Containers is setting up a new Sales Development Representative (SDR) Agent.

According to the AgentForce Security and Data Access Configuration Guide, the best practice for ensuring an agent (such as an SDR Agent) can access specific records while maintaining security is to use criteria-based sharing rules. The documentation states: “When an AI Agent needs access to a subset of records (for example, regional leads), create a sharing rule granting access to that agent’s user context based on defined criteria such as region or ownership.”

Option A (assigning the highest-level role) provides excessive access beyond the intended scope, violating the principle of least privilege. Option B (View All permission) gives global object access, which is not secure. Therefore, Option C ensures that the SDR Agent has controlled, region-specific access to lead records.

References (AgentForce Documents / Study Guide):

AgentForce Security and Access Guide: “Using Sharing Rules for AI Agent Access Control”

AgentForce Implementation Handbook: “Regional Access Configuration for SDR Agents”

Salesforce Data Security Study Guide