A practical field guide from Automation Ace.
Most automation starts with tasks: when a form comes in, create a contact; when an invoice is paid, send a receipt. That works until the work needs judgment, such as reading an email to decide what it is about, replying in your voice, or knowing when to ask for help. AI agents can handle that judgment, and when you give an agent a defined role, the right tools, company knowledge, and a manager, it starts to behave less like a script and more like a teammate.
Lindy is a no-code platform for building AI agents that work across your apps. This guide shows how to go from tasks to teammates: writing a job description for an AI employee, choosing what to hand off first, building it step by step, raising its autonomy safely, and managing it like any other member of the team. For the thinking behind goal-driven agents, see AI agent goals are the new workflows.
From tasks to teammates
An “AI employee” is not a single prompt. It is an agent with the same things a new hire gets:
- A role with a clear mission and boundaries.
- Triggers that tell it when work has arrived.
- Tools and permissions for the apps it needs, and nothing more.
- Knowledge about your company, products, and policies.
- Rules for escalation so it asks for help instead of guessing.
- A manager who reviews its work and adjusts its instructions.
If you would not give a new hire a job without these, do not give one to an AI either.
What Lindy is
Lindy is a platform for building AI agents (Lindy calls them Lindies) without code. Based on its documentation and published features at the time of writing, the building blocks include:
- Triggers: events that start an agent, such as a new email, a new message, a form submission, a webhook, or a schedule. One agent can have several triggers.
- Actions: steps that do things in connected apps, such as sending email, updating records, posting messages, or making HTTP requests.
- Agent steps: AI-driven steps where the agent decides which of its allowed tools to use and keeps working until an exit condition is met.
- Conditions: branches based on data or AI classification.
- Knowledge base: documents, websites, and other sources the agent can search for company-specific answers.
- Memory: context that carries across runs.
- Integrations: connections to common business apps, plus webhooks and HTTP requests for others.
- Templates: starting points for common jobs such as inbox triage and meeting preparation.
- Escalation: handing work to a person when the agent should not decide alone.
Depending on plan, Lindy also lists capabilities such as phone calls and computer use (operating websites that have no API). Usage is credit-based and heavier tasks use more credits, so check Lindy's current pricing and limits before you design a high-volume agent.
Task automation vs AI agent vs AI employee
| Task automation | AI agent | AI employee | |
|---|---|---|---|
| Unit of work | One step or one workflow | A goal inside one workflow | A role with several recurring jobs |
| Decides how | Fixed rules you write | AI chooses tools within the run | AI chooses, within a written job description |
| Context | Only the trigger data | Trigger data plus tools | Knowledge base, memory, and history |
| Owner | Whoever built it | Often unclear | A named manager who reviews its work |
| Measured by | Did it run? | Did it finish? | Outcomes, quality, and cost, like a person |
You do not need an AI employee for everything. Fixed, predictable steps are cheaper and more reliable as plain automation. The automation maturity ladder and Zapier Agents vs Zapier MCP vs AI by Zapier help you pick the right level.
Start with a job description
The single biggest predictor of a good AI employee is a written job description. It becomes the agent's instructions, its permission list, and your review checklist. Here is a template filled in for a lead qualifier:
AI EMPLOYEE JOB DESCRIPTION
Name / role: "Riley", Inbound Lead Qualifier
Manager: Head of Sales (reviews work weekly)
Mission: Every inbound lead gets a fast, accurate first reply
and qualified leads get a booked call.
Triggers: New website form lead; new email to sales@
Inputs: Form answers, email body, CRM history, enrichment data
Knowledge: ICP doc, pricing page, FAQ, case studies, objection guide
Tools allowed: CRM (search, create, update lead fields), email (draft,
send from sales@), calendar link, Slack (post to #sales)
Tools NOT Deleting records, discounts, contracts, changing
allowed: deal owners
Rules:
- Reply within 5 minutes during business hours.
- Never quote prices beyond the public pricing page.
- Never promise features, timelines, or discounts.
- Use the lead's own words when summarizing their need.
Escalate to a person when:
- Company size > 500 or the lead mentions procurement/security review
- Pricing negotiation, complaints, or legal questions
- Confidence in qualification is low
Outputs: CRM fields: fit_score, segment, summary, next_step
Success: Median first reply < 5 min, booking rate, rep agreement
with qualification >= 90%, zero policy violations
Write it with the person who currently does the job. The exceptions they mention (“unless it is a reseller, then…”) are exactly what the agent needs. For more on choosing outcomes rather than steps, see goals to give AI agents instead of workflows.
Choose your first AI hire
Good first roles share four traits: high volume, mostly text, judgment that a smart new hire could learn in a week, and mistakes that are easy to catch and undo.
| AI employee | Typical triggers | Tools it needs | Start at autonomy level | Escalates when |
|---|---|---|---|---|
| Inbox assistant | New email | Email, calendar, CRM lookup | 1-2: label, draft replies | Money, legal, complaints, VIPs |
| Meeting coordinator | New meeting request, meeting ended | Calendar, notes, CRM, email | 2-3: propose times, send recaps | Conflicts with senior calendars |
| Lead qualifier (SDR) | New form lead, inbound email | CRM, enrichment, email, scheduling link | 2: draft first touch for approval | Enterprise accounts, pricing questions |
| Support teammate | New ticket or chat | Helpdesk, knowledge base, order lookup | 1-2: suggest answers, tag and route | Refunds, outages, angry customers |
| Research analyst | Schedule, new account added | Web search, documents, Slack | 3: write briefs autonomously | Low-confidence findings |
| Phone receptionist | Inbound call | Phone, calendar, CRM | 2-3: answer FAQs, book appointments | Emergencies, callers asking for a person |
| Recruiting coordinator | New applicant | ATS, email, calendar | 2: screen and schedule | Any rejection decision |
Avoid starting with work that is rare, high-stakes, or depends on knowledge nobody has written down. If the process is not documented, document it first; the approach in building role-based training with Trainual works for AI employees as well as people.
The autonomy ladder
New hires do not get full authority on day one, and neither should AI employees. Move up one level at a time, and only when the metrics say it is safe:
| Level | What the AI employee may do | Human role |
|---|---|---|
| 0. Shadow | Runs on real inputs but only logs what it would do | Compare its choices with yours |
| 1. Suggest | Labels, summarizes, and drafts; changes nothing outside notes | Use or ignore suggestions |
| 2. Approve-to-act | Prepares actions and asks before sending or updating | Approve, edit, or reject each action |
| 3. Act within limits | Acts on its own for defined cases, escalates the rest | Review a sample and all escalations |
| 4. Autonomous with audit | Owns the job end to end | Weekly review of metrics and logs |
Different jobs within one role can sit at different levels. An inbox assistant might label and archive newsletters on its own (level 3) while every reply to a customer still needs approval (level 2).
How to build an AI employee in Lindy, step by step
- Write the job description using the template above.
- Start from a template if Lindy has one close to the role, or from a blank agent.
- Add triggers for each kind of incoming work. Filter early so the agent only wakes up for work it owns.
- Load knowledge: FAQs, policies, product docs, pricing pages, tone guide. Remove outdated documents; an agent will confidently use stale content.
- Connect only the tools it needs, with the narrowest permissions available. Use a dedicated account or mailbox where possible.
- Use fixed steps where the path is known and agent steps only where judgment is needed. Deterministic steps are cheaper and easier to debug.
- Add escalation paths: a Slack message, an email, or an approval request with the context and a recommended action.
- Test with real examples, including messy and adversarial ones: angry emails, missing data, a prompt telling the agent to ignore its rules.
- Run in shadow or suggest mode for one to two weeks and compare with human decisions.
- Launch, then review weekly, updating instructions and knowledge based on what went wrong.
Example 1: Inbox assistant
Job: keep a founder's inbox under control. Trigger: new email.
- Classify each email: customer, lead, vendor, internal, newsletter, spam, personal.
- Archive newsletters and notifications on its own after a shadow period.
- Draft replies to routine requests in the founder's voice, using the knowledge base for facts.
- Create tasks for anything that needs action, with a one-line summary and due date.
- Send a daily digest of what it handled, what it drafted, and what needs attention.
- Escalate: money, legal, complaints, investors, and anyone on a VIP list.
The rules-based version of this is covered in AI email triage automation.
Example 2: Lead qualifier
Job: make sure every inbound lead gets a fast, relevant reply. Triggers: new form lead, email to the sales inbox.
- Search the CRM to see if the lead or company already exists, then create or update the record.
- Research the company from its website and score fit against your ideal customer profile.
- Draft a personal first reply with a booking link; send automatically for clear fits once trusted.
- Write the score, segment, and summary to CRM fields so reps see why.
- Escalate: large accounts, pricing negotiation, and low-confidence scores.
For the qualification logic, see AI lead qualification with Zapier and OpenAI, and for what happens in the CRM next, automating the sales pipeline with Close + AI.
Example 3: Support teammate
Job: answer common questions and prepare everything else for a human. Trigger: new ticket or chat.
- Search the knowledge base and draft an answer with the source article linked.
- Look up order or account details through an integration when the question needs them.
- Tag topic, urgency, and sentiment, and route to the right queue.
- Reply on its own only to question types you have approved, such as password resets or shipping times.
- Escalate: refunds, outages, legal threats, and frustrated customers, with a summary so nobody has to ask twice.
See support ticket triage automation for routing design, and Manychat + AI if support also starts in social DMs.
Example 4: Meeting coordinator
Job: handle the work around meetings. Triggers: new meeting booked, meeting ended.
- Before: research attendees and their company, pull CRM history, and send a short prep brief.
- After: turn notes or a transcript into a summary, decisions, and action items.
- Create tasks for each action item, update the CRM, and draft the follow-up email for approval.
- Escalate: anything involving commitments on price, scope, or dates.
For scheduling-side automation, see Calendly pre- and post-meeting automation.
Building a team of AI employees
Once one AI employee is working, it is tempting to build a single super-agent that does everything. Resist that. Like people, agents work better with focused roles:
- One job per agent. A lead qualifier and a support teammate have different knowledge, tools, and escalation rules.
- Explicit handoffs. When the support agent spots a sales opportunity, it hands off to the lead qualifier with context, rather than trying to sell.
- One writer per field. Two agents updating the same CRM field will overwrite each other.
- Shared knowledge, separate instructions. Company facts can be shared; rules and tone should be role-specific.
- A human manager for the team who sees all escalations in one place.
Lindy with Zapier, Make, and your own code
AI employees do not replace your existing automation; they sit on top of it. A practical split:
- Lindy handles the judgment: reading, deciding, drafting, conversing.
- Zapier or Make handles fixed, high-volume plumbing across thousands of apps: syncing records, posting notifications, moving files.
- Webhooks connect them. An agent can call a webhook to start a Zap (for example, “create the onboarding project”), and a Zap can call an agent's webhook trigger to hand it work. See API vs webhook and passing data with API requests and webhooks.
- MCP is another way to give agents access to many apps; see what Zapier MCP is.
Putting deterministic work in Zapier keeps credit use down and makes failures easier to find. For why this still takes engineering discipline, read why AI agents need automation engineers.
Managing AI employees like real teammates
- Weekly one-on-one: the manager reads a sample of runs, all escalations, and any complaints, then updates instructions or knowledge.
- Version the instructions. Keep a changelog of what changed and why; see how to version and test AI prompts.
- Watch cost like salary. Track credits per task and per outcome; a cheap agent that books no meetings is expensive.
- Document it. Record what each agent does, what it can access, and who owns it, the same as any automation; see automation documentation and handoff.
- Plan for departures. If the agent's connected accounts belong to one person, it breaks when they leave; see what happens to automations when someone leaves.
Guardrails
- Least privilege: grant only the actions in the job description. No delete permissions unless essential.
- Sending limits: cap how many emails or messages an agent can send per hour, especially early on.
- Approval for irreversible actions: payments, deletions, contracts, and anything public. Human in the Loop patterns apply.
- Prompt injection awareness: emails and web pages can contain instructions. Tell the agent that content it reads is data, never instructions, and test for it.
- Sensitive data: keep personal, health, and payment data out of agents that do not need it.
- Output checks: validate before anything reaches a customer; see AI guardrails.
- Kill switch: know how to pause an agent in seconds, and who is allowed to.
Metrics to track
- Volume handled and share resolved without a person.
- Escalation rate and whether escalations were justified.
- Quality: human agreement rate on decisions and edits needed on drafts.
- Speed: time from trigger to first action.
- Business outcome: meetings booked, tickets resolved, hours saved.
- Cost: credits or spend per task and per outcome.
- Incidents: policy violations or customer complaints (target: zero).
Measure the current manual baseline first; see defining success metrics before you automate.
A practical rollout order
- Week 1: pick one role, write the job description with the person who does the work today, and gather knowledge documents.
- Week 2: build in Lindy, test with real and adversarial examples, and run in shadow mode.
- Weeks 3-4: move to suggest and approve-to-act levels; review daily.
- Month 2: grant level 3 autonomy for the safest job types; move to weekly reviews.
- Then: hire your second AI employee for a different role, and connect the two with explicit handoffs.
If you want help designing AI employees, their guardrails, and the automation underneath them, Automation Ace can scope and build it with you.
Frequently asked questions
What is an AI employee?
An AI employee is an AI agent set up like a team member: it has a defined role, triggers that bring it work, tools and permissions for the apps it needs, company knowledge, rules for when to escalate to a person, and a human manager who reviews its work and measures its results.
What is Lindy?
Lindy is a no-code platform for building AI agents that work across business apps. Agents are built from triggers, actions, AI-driven agent steps, conditions, a knowledge base, and integrations, and can escalate to a person when they should not decide alone. Features and plans change, so check Lindy for current details.
What tasks should I give an AI employee first?
Start with high-volume, text-heavy work where a smart new hire could learn the judgment in a week and mistakes are easy to catch and undo, such as inbox triage, lead qualification drafts, support answer suggestions, and meeting prep and follow-up. Avoid rare, high-stakes, or undocumented work.
How much autonomy should an AI agent have?
Increase autonomy in stages: shadow mode, then suggestions, then approve-to-act, then acting within limits, and only then autonomous with audits. Move up one level at a time based on agreement rates and incidents, and keep irreversible actions such as payments and deletions behind human approval.
Is Lindy a replacement for Zapier?
Not usually. Lindy is strongest at work that needs judgment, such as reading, deciding, drafting, and conversing. Zapier and Make are better for fixed, high-volume steps across many apps. Many teams connect them with webhooks so agents hand fixed work to Zaps and Zaps hand judgment work to agents.
How do I write instructions for an AI agent?
Write a job description: the mission, triggers, inputs, knowledge sources, tools it may and may not use, rules, escalation conditions, required outputs, and success metrics. Write it with the person who does the job today so exceptions are included, and version it as you improve it.
How do I keep AI agents safe?
Grant least-privilege access, cap sending volume, require approval for irreversible or public actions, treat content the agent reads as data rather than instructions to reduce prompt injection risk, keep sensitive data out of agents that do not need it, validate outputs, and have a way to pause the agent instantly.
How do I measure whether an AI employee is working?
Track volume handled, share resolved without a person, escalation rate, human agreement with its decisions, edits needed on drafts, speed, business outcomes such as meetings booked or tickets resolved, cost per outcome, and incidents.
Disclaimer: Lindy features, plan availability, credit usage, and integrations change over time; confirm current details in Lindy's documentation and pricing page. Product features, limits, and pricing mentioned here change over time, so confirm current details in each vendor's documentation. This article may include links to apps, products, or services; some links may be affiliate links, which means Automation Ace may earn a commission at no extra cost to you.