Agentforce uses topics, instructions, and permitted actions to handle defined requests. The administrator decides the supported work, the data available to it, and the checks needed before activation. A natural-language instruction doesn't replace object permissions, field security, record sharing, or authorization inside an invoked action.
Use a limited business scope and test ordinary, ambiguous, and denied requests in preview. When a response fails, inspect the selected topic, action inputs, relevant data, and access context before broadening permissions. Updating an instruction also needs another preview pass, because it can change which action runs. This course checks those configuration decisions; it doesn't pretend to execute the hosted service or generate a production conversation. The goal is safe administration and evidence you can explain.