Agentforce switches on, a deadline switches off. Neither one decides anything for you.
Salesforce began enabling Agentforce in eligible orgs this month, and it quietly cancelled the profiles retirement back in June. Inside: what auto-enablement changes, the deadline that vanished, why agent counts outran the scoreboard, and a sharper audit trail.
Agentforce Turns Itself On This Month
Salesforce began enabling the Agentforce platform in eligible orgs the first week of September. No action required, and no added cost.
- Eligible orgs get the platform switched on automatically
- The Agentforce toggle leaves Setup later in Winter ’27
- Admins with Einstein AI already have Builder access
- Who holds Manage AI Agents in your org
- Whether Einstein stays on, since that switch still works
- Which agents are active, before someone activates one
The Profiles Deadline Quietly Disappeared
Salesforce cancelled the permissions in profiles retirement on June 6. There is no cutover date, and nothing in your org breaks.
- Least privilege is still the security recommendation
- Permission sets and permission set groups remain the roadmap
- The Minimum Access Salesforce profile is still the baseline
Thirteen Agents and No Scoreboard
The average Salesforce business ran five activated agents in early 2025 and thirteen by April. Measurement did not keep pace.
- Only 32% have defined AI success metrics
- Just 27% call their customer data fully unified
- 46% of B2C orgs report conflicting duplicate records
Your Audit Trail Gets Sharper
Two Winter ’27 changes make the “who changed this” question easier to answer, and narrow a permission some users lean on today.
- Setup Audit Trail now needs its own permission
- Field History Tracking for Users reaches general availability
- Broad Setup access no longer implies audit visibility
48% of one org’s storage traced to a departed admin
Senior Consultant Nick Stump and Delivery Director Al Huerta lay out the review gates they keep between AI agents and a production org, including the health check that traced 48% of a client’s storage to a broken automation nobody owned. Automate the work, own the call.
Dreamforce sets the next defaults.
Dreamforce runs September 15 to 17 and streams free on Salesforce+. That is where the next round of defaults gets announced, so decide what you want your org to allow before you are told what changed. Then bring the list to your consultant.
Review Agent Permissions Before the Toggle Goes Away
Not sure who can build or activate an agent now that Agentforce is on, or which profiles still carry permissions you meant to move? We’re offering managed services clients a complimentary Security Health Check to inventory both. Talk to your Cirrius Consultant.
*Agentforce enablement and Winter ’27 upgrade dates roll out by instance; verify your org’s schedule in Setup → Release Updates and on Salesforce Trust.
