Enterprise AI agents are encountering significant delays not due to the performance of AI models but because of restrictive permissioning systems. These agents frequently hit a roadblock when determining what actions they are authorized to perform, on whose behalf, and how authorization is verified. Workday addresses this issue by using its existing system of record as the governance layer for AI agents. Gerrit Kazmaier, president of product and technology at Workday, emphasized that customers struggle when piecing together AI solutions without proper integration, leading to diminished security and overly broad results.
Workday’s solution, Sana, launched in partnership with Google, integrates deeply with enterprise systems to ensure proper authorization and control, especially critical for HR and finance operations where even minor errors can have serious consequences. The system leverages organizational context, identity verification, and layered business process logic to maintain accuracy and compliance. By authenticating users and restricting agent actions within their permitted scope, Workday enhances security and accountability. Industry experts stress that embedding permissions directly within the systems of record is essential to avoid chaos and ensure governance in regulated spaces.
