AI Agent Studio Letting users who had never written a prompt build with generative AI, and giving admins a way to audit every run.

Role

Founding designer. Co owned the MVP with a design lead, end to end.

Team

2 designers, 2 directors of PM, engineering, docs.

Timeline

Concept to general availability, about 3 months.

Launched

June 2024, on the Imagine keynote stage.

Overview

Automation Anywhere runs more than 400 million automations a year for enterprises where a wrong answer has a cost. When generative AI arrived, the users who build those automations had never written a prompt.

AI Agent Studio is the part of the platform that connects a model, turns a prompt into a reusable skill, drops it into a process, and records every run for audit. One support email shows the whole thing: it gets scored for tone, angry ones go to a person, calm ones get an article, and every prompt and answer is logged.

My role

  1. Founding designer on the product, from the first requirement to general availability, co owning the MVP with a design lead.
  2. Designed all four surfaces: the model connection, the prompt workbench, the process step and the governance log, and the handoffs between them.
  3. Ran the research with admins and developers across three product areas and mapped every audit event before a screen was drawn.

What shipped, and what it changed.

Automation Anywhere's claims, Imagine 2024

Pendo

Automation Anywhere was moving from rule based automation to agentic process automation. The users who build automations there had never worked with an AI model.

I have heard of generative AI. I just do not know what a model is.

Sue, the citizen developer persona Automation Anywhere uses in its Release .33 walkthroughSue · Citizen Developer

Who builds here

Automation Anywhere's software runs 400 million office tasks a year. Most of the builders there are citizen developers, who assemble ready made steps and do not write code.

What made it hard

Adding AI normally means learning what a model is, getting keys from a cloud provider and writing code. Asking that of a citizen developer means changing how they work.

The question

How do we let them build with AI inside the tool they already use, without changing the way they work or what they need to understand?

Competitor research

We looked at some of the top platforms in the industry to learn how they were bringing agents into their workflows.

What we picked for the MVP

GPT-4 32kClaude 2.1Gemini 1.0 ProSupport Ops

Model connections

An admin sets up the provider, model and version once. Builders pick the connection by name.

Rate the tone offrom 1 to 5 and classify it.$email$

Prompt templates

Write the prompt once and leave a variable where the data goes. The automation fills it with a real email on every run.

Softer refusalsv3 · trimmed the refusal wordingnow

Named versions

A name and a note on what changed, on every version.

summariseclassifyreplyEstimated cost per run$0.0312,048 tokens

Cost at build time

Token count and cost estimate on screen before anything ships.

Five design decisions

Every one is an element on the shipped workbench. Click the screen to open it full size.

  1. 01

    Builders pick the model by name

    An admin sets it up once. Builders never choose a provider, a model or a version.

  2. 02

    Only four settings are shown

    Competitors exposed every dial they had, and most went untouched. We kept the ones that change the answer and put them in front.

  3. 03

    The prompt has a blank for the data

    You fill the blank with sample text to test it, and the automation drops in the real thing on every run.

  4. 04

    The answer is scored before it ships

    Every test run returns accuracy, tone and toxicity, so a weak prompt is caught early.

  5. 05

    Only an admin can turn logging off

    A builder can mute logs on one skill while testing, and only if an admin allows it.

Our process

Three months from the first requirement to general availability. Most of the second half went into review loops.

Design principles

A seamless experience end to end, across every persona involved, was the priority. These six kept us to it.

Familiar

Match the mental model builders already have from the Control Room.

Contextual

Everything happens inside the Control Room, so nobody learns a second tool.

Visibility

You can see what the model did, from setup through every run.

Intuitive

Any builder, from citizen developer to professional, can use it without special training.

Error prevention and recovery

Catch mistakes before the model runs, and make them easy to fix.

Functionality over aesthetics

Every control on the workbench does a job. Nothing is there for looks.

How it works, in one support case

A customer writes in about a late order. That one email passes through four roles before it gets an answer, and each of them works on a different screen.

Jake, Automation admin

Jake

Automation admin

Owns the Control Room. He sets up the model connections and decides which roles are allowed to use them.

Marcus, Pro developer

Marcus

Pro developer

Writes and tunes the prompts, and compares models to find the one that answers best for a use case.

Sue, Citizen developer

Sue

Citizen developer

Builds processes from ready made steps. She does not write code and had never worked with a model.

Rochelle, Governance lead

Rochelle

Governance lead

Audits what the models did, and checks that no sensitive data went into a prompt.

Jake, Automation adminJakeAutomation admin

Connect a model like a credential, not a configuration.

A wizard with four panes, each a decision Jake already knows how to make. The key never leaves the credential vault, the connection tests itself before it can be saved, and sharing is a role.

  1. 1

    Pick a vendor and a model

  2. 2

    Credentials from the vault

  3. 3

    Test the connection

  4. 4

    Invite roles

  5. It shows up in the gallery

01/04
Marcus, Pro developerMarcusPro developer

Turn a prompt into a skill the team can reuse.

Model at the top, parameters on safe defaults, the prompt with a slot for live data, sample input on the right. Marcus runs it, dislikes the answer, switches to Jake's new connection without touching a key, and saves.

  1. 1

    Open the template

  2. 2

    Run it against sample input

  3. 3

    Judge the answer

  4. 4

    Switch the model

  5. Run again, save, share

02/04
Sue, Citizen developerSueCitizen developer

Use it in a process without knowing what a model is.

The skill is one action on the canvas, next to the Salesforce step and the email step. The email goes in, a tone score comes out, and a branch on that number does the rest.

  1. 1

    Add the Generative AI action

  2. 2

    Pick the skill

  3. 3

    Map the input

  4. 4

    Branch on the score

  5. Run it

03/04
Rochelle, Governance leadRochelleGovernance lead

Audit every run from one switch.

Jake turns on data logging. Rochelle opens the prompt log, filters to the last 24 hours, opens a session, reads the prompt, the answer and the parameters, and exports the record or forwards it to the security team’s monitoring system.

  1. 1

    Jake turns on data logging

  2. 2

    Rochelle opens the prompt log

  3. 3

    One session opens the record

  4. 4

    Adequate?

  5. Export, or forward it to security monitoring

04/04

What the handoff changed.

The same support email, before the four of them and after.

Customer emails a shared inbox→L1 agent reads and triages by hand→Creates a Salesforce case→L2 agent resolves

Before

Every email waited for a person to read it, then for another to fix it.

Customer emails the inbox→Process watches the inbox→Skill scores the tone→Calm: articles→Angry: a person, now

After

Calm emails get an answer without a human. Angry ones reach one faster, with the case open.

What AI governance is, and why it shipped with the first release

An automation runs the same way every time. A model does not. It can answer differently on two identical runs, and it can be sent data nobody meant to share with it. Automation Anywhere's customers run regulated work, so every answer needs a record of how it was produced.

Automation Anywhere frames it as a loop of three things, each one feeding the next.

  1. 01

    Guardrails

    Stop what should not happen. Who is allowed to use a model, and what an answer scores on accuracy, tone and toxicity before it ships.

  2. 02

    Observability

    See what actually happened. Every prompt and every answer written to a log an auditor can filter, open and export.

  3. 03

    Evaluation

    Check it is still good. Benchmark a prompt against known answers, and compare one model with another.

The first release shipped observability in full, and the part of guardrails that runs while you build. Data masking and model evaluation came in later releases.

Data logging is one setting, and only an admin can change it. The nested option is the only way a builder can mute logs on a skill, and an admin has to grant it.

Individual runs are one view. The admin also needs the aggregate: which models are actually being used, by which automations, and what they are costing in tokens.

The admin dashboard: most used models, a model utilization table, token consumption per agent, and export to CSV. Added in Release .34.

The models it had to work with

Five models across four vendors were live on day one, and the list was going to keep changing. So a model is a connection an admin sets up, not a choice a builder makes.

  • Amazon Bedrock
  • Azure OpenAI
  • Google Vertex AI
  • OpenAI
  • Anthropic Claude 2.1Amazon Bedrock
  • GPT-3.5 TurboAzure OpenAI
  • GPT-4 32kAzure OpenAI
  • Gemini 1.0 ProGoogle Vertex AI
  • OpenAI, directOpenAI

Hugging Face, custom model definitions and Enterprise Knowledge followed six months later. The wizard and the log did not change.

Looking back.

  • Trust scaffolding, not new patterns

    Designing a probabilistic system inside a deterministic platform was mostly choosing when to show uncertainty and when to hide it. The scores under an answer and the log behind a run did more than any new component.

  • The field moved under us

    Some patterns we picked because they were emerging in 2024 are now defaults. Some I would design differently now that the platform has a reasoning engine.

  • Name the person, not the role

    The flows got clear the moment each screen had a name on it. Jake, Marcus, Sue and Rochelle are why a stranger can follow this page.

Excited to share more. Let's connect.

This is the high level version. The decisions behind the screens, the dead ends, and the things I would do differently are better in conversation.

Thanks for visiting!