Internal operations agents
The quiet, high-return category: an agent that staff ask instead of emailing HR, finance or IT. Leave balances, the travel policy, "which template do I use for a supplier onboarding", a first draft of the weekly sales report from the ERP export. Autonomy: assist. Risk: low — as long as access is scoped by role.
Three jobs, one architecture
| Job | Tools | Output | Human step |
|---|---|---|---|
| Policy & how-to Q&A | document search over HR/finance/IT policies | Answer with the quoted passage and document version | None; escalate if no passage found |
| Report drafting | spreadsheet/ERP read, chart generation | Draft with the figures it used listed | Owner reviews and sends |
| Approval chasing | ticket/approval system read, message send | Reminder to the approver with context | Approver acts |
The failure mode is stale documents
An internal agent is a mirror of your document hygiene. If two versions of the leave policy exist, the agent will find both and pick one. The pre-launch work is therefore editorial: one owner per document, a version date in the document, a "superseded" folder the search tool cannot see. Answers should quote the passage and cite the document and date so a staff member can check in ten seconds.
Access follows the person, not the agent
The agent must query systems as the requesting user or with a role-scoped token, never with a master key. A payroll clerk's agent may read payroll; a driver's agent may not. Where the identity provider (Microsoft Entra, Google Workspace) is already in place, the agent inherits it through the same sign-in; on WhatsApp, where identity is a phone number, restrict the agent to information that is safe to give to anyone claiming to be that employee — and route the rest to the intranet.
Cost
No channel fees on Teams, Slack or email. Cost scales with the size of documents pulled into context per question — retrieving three relevant passages costs cents; dumping a 60-page policy into every call costs dollars. Five thousand questions a month lands in a band of US$30–200 depending on that discipline (illustrative; see costs).
Related patterns
Finance agents add write actions and a much higher risk class. HR and IT helpdesk agents are the same architecture with identity verification added — both are rows in the comparison database. Enterprise-wide governance, data classification and identity design for large organisations is the territory of enterpriseai.co.zw.