Assign Marketplace agents to roles

Assign Marketplace agents to Sage Intacct roles to control which users can access and use the agents in Sage Copilot.

Enabling a Marketplace agent makes it available to your company, but users cannot access the agent until it’s assigned to one or more roles.

Before you begin

Before assigning a Marketplace agent to a role:

  • The Marketplace agent must be purchased and associated with your company.

  • The Marketplace agent must be enabled.

  • Review the agent role to understand what the Marketplace agent can do. See Manage Marketplace agent roles.

  • You must have permission to manage roles.

  • Your company must use role-based permissions.

For information about purchasing and enabling Marketplace agents, see Purchase and set up a Marketplace agent.

Plan role access before assigning Marketplace agents

An agent can do something only when both the agent role and the user's role allow it. When you plan role access, you decide what the user's role allows. The agent role sets the limit for the agent.

The permissions listed in the agent profile are a display label only. They don't show everything the agent can access. To see what the agent can do, review the agent role in your company. For more information, see Manage Marketplace agent roles.

When you purchase a Marketplace agent, an agent role is added to your company. Use it as a reference when you decide which permissions your users need. You can also duplicate it as a starting point for a user role.

Keep agent roles separate from user roles. If you assign an agent role directly to a user, that user automatically receives any permissions added to the role by future agent updates. Consider the security impact before you assign an agent role to a user.

To help manage access, consider creating a dedicated role for each Marketplace agent. Intacct recommends:

  1. Create a dedicated role for a Marketplace agent.

  2. Assign the permissions required by the agent to that role.

  3. Assign the Marketplace agent to the role.

  4. Assign the role to users who need access.

This approach helps ensure that users receive only the permissions needed to use the Marketplace agent.

If the partner who built the agent updates its permissions, for example, during a software update, those changes apply automatically to all companies using the agent. This can affect any customizations you've made to the agent's role. Check with your agent provider if you notice something change unexpectedly.

Assign a Marketplace agent to an Intacct role

Assign the Marketplace agent to a role to make it available to users who need access to its capabilities.

  1. Go to Company > Admin > Users, roles, and groups > Roles.

  2. Find the role that you want to change permissions for and select Subscriptions.
  3. Select the Copilot agents tab.

  4. Select the Marketplace agent that you want to assign to the role. You can select more than one agent.

  5. Save the role.

The Marketplace agent is now assigned to theIntacct role.

Verify user access

After assigning a Marketplace agent to a role:

  • Confirm that the Marketplace agent is enabled.

  • Confirm that the role includes the Marketplace agent subscription.

  • Confirm that users are assigned to the role.

  • Ask a user assigned to the role to open Sage Copilot, enter @, and verify that the Marketplace agent appears in the list.

    For example, a user enters @ in Sage Copilot and selects the agent they want to interact with from the list.

If the Marketplace agent does not appear, review the role assignment and required permissions.

Remove access to a Marketplace agent

You can remove access to a Marketplace agent at any time by updating role assignments.

  1. Go to Company > Admin > Users, roles, and groups > Roles.

  2. Find the role that you want to change permissions for and select Subscriptions.
  3. Select the Copilot agents tab.

  4. Find the Marketplace agent that you want to remove and uncheck the box.

  5. Save the role.

Users assigned to that role can no longer access the Marketplace agent in Sage Copilot

Multi-company considerations

Role assignments are managed separately for each Intacct company.

If a Marketplace agent is associated with multiple companies, you must assign the Marketplace agent to roles in each company where users need access.

Role assignments and permissions do not automatically carry over between companies.

Best practices

Before assigning a Marketplace agent to users:

  • Review the agent description and intended use cases.

  • Review the permissions required by the Marketplace agent.

  • Assign the Marketplace agent only to roles that need access to its capabilities.

  • Keep agent roles separate from user roles.

  • Test access with a limited group of users before assigning the Marketplace agent more broadly.