SF-Admin Agentforce AI Practice Question
Exhibit
Error: Action execution failed. Cause: 'Flow name Order_Lookup_Flow not found or unauthorized'. Status: 403 Forbidden.
Refer to the exhibit. An agent attempts to trigger an order lookup, but it fails with the provided error. What is the most likely cause of this 403 error?
⚠ Common exam trap
Candidates frequently mistake a 403 Forbidden error for an invalid record ID or bad API endpoint, ignoring the service user's missing execution permissions.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The agent's user profile lacks execution permissions for the Flow.
A 403 Forbidden error in Salesforce indicates that the executing user—in this case, the Agentforce service user—lacks the necessary permissions to access the specified resource. In the context of Flow-based actions, this means the agent's profile or permission set does not include 'Run Flow' access for the specific flow mentioned, preventing it from executing the requested automation safely and securely.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The flow is currently inactive.
Why it's wrong here
If a flow were inactive, the error would typically be a 'Flow Not Found' or a specific runtime error indicating that the flow cannot be invoked, not a 403 Forbidden. The 403 status code is explicitly related to permission restrictions, not the activation status of the flow.
- ✓
The agent's user profile lacks execution permissions for the Flow.
Why this is correct
The 403 Forbidden error indicates an authorization failure. For an agent to invoke a flow, the user profile associated with the agent must have the 'Run Flow' permission. Without this explicit authorization, the platform blocks the agent from initiating the requested process, resulting in the observed error.
- ✗
The flow has an invalid input parameter.
Why it's wrong here
An invalid input parameter would typically trigger a validation error or a runtime exception rather than a 403 Forbidden status. The 403 error code is a security-related response indicating that the platform has denied access to the object, not that the object's input data was malformed.
- ✗
The Agentforce platform is experiencing a service outage.
Why it's wrong here
A service outage would typically result in a 5xx series error code (e.g., 503 Service Unavailable). A 403 Forbidden error is specifically tied to access control and permission configurations within the environment, confirming that the agent is authenticated but lacks the right to perform the action.
About these practice questions
Courseiva writes every SF-Admin question from scratch — 202 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Salesforce exam blueprint
This SF-Admin practice question is part of Courseiva's free Salesforce certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SF-Admin exam.