How Policies Work
Logic AI uses a layered policy system:- Org default — Applies to every chat user
- Per-user overrides — Take precedence over the org default for individual users
Tool Permissions
Tools are grouped into Reading data, DML, and Utilities. Each tool can be individually toggled on or off:| Tool | What it does | Default |
|---|---|---|
| SOQL query | Run read queries against any object | Enabled |
| Get record | Retrieve a single record by ID | Enabled |
| Describe object | Inspect object schema and fields | Enabled |
| Create record | Create new records | Disabled |
| Update record | Modify existing records | Disabled |
| Delete record | Delete records (sends to Recycle Bin) | Disabled |
| Mass create records | Bulk-create multiple records | Disabled |
| Mass update records | Bulk-update multiple records | Disabled |
| Mass delete records | Bulk-delete multiple records | Locked — contact Logicfold |
| Generate CSV | Build a CSV file and attach it to the chat | Disabled |
| Generate PDF | Compose a formatted report in the side panel | Disabled |
| SOSL search | Search a term across multiple objects at once | Enabled |
| Send email | Send an email on the user’s behalf | Enabled (approval required) |
| Send notification | Send a Salesforce custom notification | Enabled |
| Post to Chatter | Post an update to a record feed or group | Enabled |
| Run report | Run an existing report and return results | Enabled |
| Create report | Build a new report definition | Enabled |
| Invoke Apex action | Call an invocable Apex action | Enabled |
| Invoke Flow | Launch an autolaunched Flow | Enabled |
Per-Call Limits
Some tools expose a Max per call limit:- SOQL query — maximum rows returned (default 50, up to 2,000)
- Mass create / update / delete records — maximum records per operation (default 200, up to 10,000)
Approval Requirements
Write tools can require the user to approve the action in-chat before it runs:- Create record / Update record / Mass create / Mass update — approval is configurable (toggle “Needs approval”)
- Send email — approval is required by default (configurable); Logic AI shows the recipients, subject, and body before sending
- Delete record / Mass delete records — approval is always required and cannot be turned off
Model Allowlist
The Models section controls which Anthropic models the chat model picker exposes. Toggle individual models on or off. Leaving all models on means no restriction (users see the full picker).Per-User Overrides
Below the org default, every user assigned the Logic AI User permission set is listed (admins are excluded). Click a user to open their override editor, where you can:- Enable or disable individual tools just for that user
- Adjust their per-call limits and approval requirements
- Restrict the models they can pick

