AgentFlow agents access and actions

This table describes AgentFlow agents based on access level, supported actions, and licensing requirements.

Access requirements

Each agent enforces role-based access and feature-level controls. You must have the appropriate roles and privileges in your Reltio tenant to use licensed or write-enabled agents.

• Data Explorer Agent: Requires read-only access. All attribute masking rules are enforced.
• Match Resolver Agent: Requires read access to all candidate attributes and write access to perform merges or rejections. If web enrichment is enabled, the Web Search toggle must be turned on per user.

Role examples

Here's how access typically maps to user roles:

User role	Can use Data Explorer Agent?	Can use Match Resolver Agent?
Data Steward	Yes	Yes (with write access)
Business User	Yes	No
System Administrator	Yes	Yes (if enabled)

To learn more about merging and match resolution, see Resolve matches in AgentFlow using the Match Resolver Agent.

AgentFlow execution privileges

In addition to the standard role mappings shown above, AgentFlow enforces a dedicated set of permissions for the MCP server and agents. These permissions give tenant administrators precise control over who can execute functions through AgentFlow, beyond the basic read/write checks at the API level.

AgentFlow Permissions

AgentFlow System Roles