Rights and permissions for Say Hai

To use the ESS Assistant, employees must have the appropriate permissions within ESS. The assistant always respects existing ESS authorizations and only provides access to information and actions that users are already allowed to access.

Step 1: Grant Access to the ESS Assistant

Before employees can use the ESS Assistant, they must be assigned the "ESS Assistant" permission.

Without this permission:

• The ESS Assistant will not be visible in ESS7.
• The ESS Assistant will not be visible in the ESS mobile app.
• Employees will not be able to start conversations with the assistant.

We recommend assigning this permission only to users who are intended to have access to the functionality.

Step 2: Configure Functional Permissions

The ESS Assistant does not introduce a new authorization model. All actions and information requests use the same permissions that already exist within ESS.

Whenever a user asks a question or requests an action, the assistant verifies whether the user has the required permissions before providing information or executing the request.

Schedule Access

To view schedule information, users require the standard ESS scheduling permissions.

This enables employees to ask questions such as:

• "When am I working next week?"
• "Where am I working tomorrow?"
• "What shifts do I have this month?"

Recommended permissions

• View work schedule
• View historical schedules
• View shift details

Work Preferences

To manage work preferences, users must have the corresponding ESS permissions.

This enables employees to:

• View work preferences
• Create work preferences
• Modify work preferences
• Delete work preferences

Example requests

• "What work preferences do I currently have?"
• "I'd prefer evening shifts next month."
• "Remove my Friday preference."

Leave Management

To use leave-related functionality, we recommend granting the standard ESS leave permissions.

This enables employees to:

• View leave balances
• View leave requests
• Submit leave requests
• Withdraw leave requests

Example requests

• "How many leave hours do I have left?"
• "Submit a leave request for next Friday."
• "What's the status of my leave request?"

Holidays, Balances and Cards

If these features are available within ESS, employees can also access them through the assistant.

Recommended permissions

• View public holidays
• View card information
• View balances

Example requests

• "Which holidays are coming up next month?"
• "What is my current leave balance?"
• "How many extra hours have I accumulated?"

Actuals Registration

If your organization uses Actuals Registration, employees can also perform these tasks through the assistant.

Recommended permissions

• View actuals
• Create actuals
• Register activities

Example requests

• "Register a shift I worked yesterday."
• "Add an activity to my shift."

What Happens if a User Does Not Have Permission?

If a user is not authorized for a specific feature, the ESS Assistant will not expose that functionality.

Examples:

• No leave permissions → leave requests cannot be submitted or viewed.
• No balance permissions → balance information cannot be accessed.
• No actuals permissions → actuals cannot be registered.

The assistant never grants additional permissions and cannot bypass existing security settings.

Security by Design

The ESS Assistant is built around the same security principles as ESS:

• Existing ESS permissions remain the source of truth.
• All actions are performed on behalf of the authenticated user.
• Only authorized functionality is available.
• Users can access only their own information.
• The assistant never elevates privileges or grants additional access.

Our Recommendation

For organizations introducing the ESS Assistant, we recommend granting employees at least:

• ESS Assistant (required to make the assistant visible)
• View work schedules
• Manage work preferences
• View and request leave
• View public holidays
• View balances and card information

Optional:

• Register actuals

With these permissions in place, employees can immediately benefit from the most commonly used ESS Assistant capabilities while maintaining the same security and authorization model already established within ESS.

ESS Assistant
The same ESS permissions, now available through a natural AI conversation.