Assign responsibility before enrollment
Name the business owner, infrastructure operator, identity administrator and information owner. Deploy administration includes people, models, permissions, record access and operating requirements. Each role should have the authority it needs, with private employee contents separately protected.
Manage people and sessions
Agree users, groups, roles, sign-in requirements and any supported identity-provider connection. Disabling an account, revoking a session and withdrawing document access affect different parts of the workflow and must be reflected at the relevant execution boundary.
Define model and tool policy
Identify approved model endpoints, available tools, required approvals and resource limits. Confirm which policies the installed version enforces rather than assuming every configured preference is a server control.
Understand agent stop and resume
Registered-runtime controls can revoke authority and close work leases. Revoking authority is not proof that an external process has terminated. A resumed agent needs fresh permitted work; a stop must not be erased by a heartbeat or re-registration.
Keep review scoped
Reviewers need the intended work and the authority to decide on it. An administrator role alone must not expose Private Work. Current employee activity discovery is not a company-wide directory of every person’s AI use; broader authorised investigation is a separate integration scope.
Set retention and recovery ownership
Define which records and artifacts are retained, who can export them and how storage is recovered. Preserve the relevant trust and version information with backups. A record’s existence does not establish that an output was approved.
Agree the operating boundary
Identity, role and runtime-control foundations exist. Complete all-surface enforcement, investigation and installed lifecycle qualification remain open. Document the actual supported controls and exclusions for the pilot.
RIL record and review guide → / Infrastructure responsibilities →