Users & Permissions
Who may use which AI capabilities. The assistant enforces permissions and guardrails on the server – the model can only propose actions from the catalog below.
Users
6 users in this demo · 312 active users in DemoCorp
| User | Department | Access | Last active |
|---|---|---|---|
AM Anna Müller (you) Procurement Manager | Procurement Strategic Sourcing | Editor | now |
JW Jonas Weber AI Platform Owner | IT Digital Workplace | Admin | 14 hours ago |
LH Lena Hoffmann Sales Operations Lead | Sales Sales Operations | Member | 6 hours ago |
MY Mehmet Yilmaz Compliance Officer | Legal & Compliance Compliance | Member | 3 hours ago |
SR Sofia Rossi Finance Controller | Finance Accounts Payable | Member | 3 days ago |
TB Thomas Berger Head of Procurement | Procurement Procurement Leadership | Editor | 18 hours ago |
Role permissions
| Capability | Admin | Editor | Member |
|---|---|---|---|
| Use assistant (read page, Q&A) | |||
| Fill forms (UPDATE_FIELD) | |||
| Execute page actions (CLICK_ACTION) | |||
| Create automations | |||
| Run background automations | |||
| Manage company knowledge | |||
| Manage models & settings | |||
| Submit AI requests |
Action catalog & guardrails
The controlled action layer: the LLM proposes structured actions, the server validates them against the page and executes only known actions.
| Action | Description | Type | Guardrail |
|---|---|---|---|
| READ_PAGE | Read structured data of the current page | Read | Schema-validated · logged |
| UPDATE_FIELD | Set the value of a form field exposed by the page | Write | Field must exist, be editable, option-valid and grounded in a source · undo available |
| CLICK_ACTION | Trigger a button/action exposed by the page | Write | Only page-exposed actions · user confirmation required |
| SEARCH_KNOWLEDGE | Search company & personal knowledge | Read | Schema-validated · logged |
| CHECK_POLICY | Validate the current record against company policy | Read | Schema-validated · logged |
| CREATE_AUTOMATION | Turn the executed workflow into a reusable automation | Write | Reviewed in dialog before creation |
| CREATE_AI_REQUEST | Capture an 'I wish AI could…' request with page context | Write | Schema-validated · logged |