AI agents in the student information system
The SIS holds the records agents are now being built to act on: registration, holds, transfer credit, degree requirements, and financial aid. This page covers only agents, meaning systems that take actions in or against the SIS. Chatbots, predictive models, and rules automation are left out.
Why SIS agents need more care
An agent that answers a question about a hold is low risk. An agent that clears the hold, posts transfer credit, or changes enrollment is writing to the official record. Those changes affect a student’s standing, aid, and time to degree, and they fall under FERPA.
Vendors are moving from systems of record toward agents that retrieve records and do routine work. The main question for each one is the same: what can it read, what can it change, and who approves the change?
How much an SIS agent can do
This scale, adapted from a public-source research baseline, sorts SIS agents by what they are allowed to do. Assign a level only when the behavior is documented. If a vendor doesn’t say, record it as unspecified, not as safe. The suggested tier is a starting point; score the agent to confirm.
| Level | What the agent does | In the SIS | Suggested tier |
|---|---|---|---|
| A0 | Answers or searches | Looks up records or policy. Changes nothing. | T2–T3 |
| A1 | Drafts or recommends | Proposes a schedule, a requirement rule, or a resolution path. A person picks and acts. | T3 |
| A2 | Acts with approval | Prepares one specific transaction and commits it only after validation and sign-off. | T4–T5 |
| A3 | Acts within bounds | Runs a bounded multi-step task and escalates exceptions. | T5 |
| A4 | Acts with broad discretion | Takes discretionary actions that affect student rights or funds. | T5, if at all |
No source reviewed shows an SIS agent running at A4 in production. Most announced SIS agents sit at A1 or A2.
Three ways agents reach the SIS
Native vendor agents
Agents built into the SIS by its vendor, such as Workday Student or Ellucian Student agents.
Who carries the controls: The vendor builds the agent. The institution still configures permissions, approvals, and which actions are switched on.
Agents on adjacent platforms
CRM and service platforms with their own agents that read from or write to the SIS, such as Salesforce Agentforce for Education Cloud.
Who carries the controls: Ask whether the agent reads a CRM copy, calls live SIS APIs, or writes authoritative SIS records. Each is a different risk.
Institution- or partner-built agents
Agents connected to the SIS through APIs or the Model Context Protocol (MCP), including PeopleTools 8.63 MCP and third-party connectors.
Who carries the controls: Access control, prompt-injection defense, action authorization, logging, and retention move to the institution and its integrator.
Vendor agents as of October 2026
Only agent capabilities are listed. A vendor announcement shows that a feature was announced. It does not prove general availability, production use, or results.
| Platform | Agents | Status in public evidence | Write access and approvals | Commercial model |
|---|---|---|---|---|
| Ellucian Student | Agents for registration, advising, and financial aid; agentic chat; Program Studio for program creation. Grounded in Ellucian’s Higher Ed Knowledge Graph. | Announced. Per-agent availability not published. | Vendor states role and policy enforcement, audit, and human final decisions. Per-task write permissions not specified. | AI included in the Ellucian Student subscription with no metered AI billing (Sept. 30, 2026). Confirm for Banner, Colleague, and legacy Anthology. |
| Workday Student | Student Administration Agent (transcripts, transfer credit, routine tasks) and Academic Requirements Agent (building requirement rules). Sana handles orchestration. | Student Administration Agent listed as Early Adopters. No named production outcomes found. | Agent directory says administrative actions require human review and confirmation. | Flex Credits: a consumption model separate from the Student subscription. No public per-task rate. |
| Oracle PeopleSoft Campus Solutions | No delivered agents planned for Campus Solutions, per a secondary roadmap account. PeopleTools 8.63 MCP lets institutions build their own. | Roadmap. Confirm with Oracle release notes. | Set by whoever builds the agent. | Separate costs for Oracle Digital Assistant, OCI services, and partner work. |
| Oracle Student | Cloud SIS with AI-native direction; AI Agent Studio exists in the wider Fusion suite. | Roadmap. First institution waves targeted for fall 2027. | Not yet documented for student agents. | Not published. |
| Jenzabar One | Purpose-built agents on J1 APIs. A demo pulled a degree plan and proposed course sections. | Demonstrated (A1). Write-back in development, expected by end of 2026 in an analyst account. | No evidence yet of committed registration or hold overrides. | Not published. |
| Thesis Elements | Natural-language agentic workflows. | Roadmap (April 2026). | Not documented. | Not published. |
| Salesforce Education Cloud | Agentforce agents for admissions, enrollment, financial aid, and student communications. Adjacent to the SIS, not a replacement. | Available as an add-on. | Depends on how it connects to the SIS. | Agentforce add-on license. |
| Third-party MCP layers | Vendors such as ibl.ai and FoundationaLLM describe MCP connectors to Banner, Colleague, PeopleSoft, Workday, and Jenzabar. | Claimed integrations. No named deployments verified. | Institution and integrator must design scopes, approvals, and logs. | Varies. |
Named products are examples, not endorsements. Workday estimates about 75% less time processing transcripts, based on customer research. That is a vendor estimate, not a measured production result.
Where SIS agents are aimed
| Function | Agent examples | What to verify | Suggested tier for write actions |
|---|---|---|---|
| Registration and holds | Ellucian registration agents; Jenzabar course-section proposals; a partner student-account resolution agent for SAP that drafts a path through holds, payment plans, and aid timing | Blocked prerequisites, time conflicts, seat availability, aid effects, concurrency, and who can override a hold | T5 |
| Academic requirements and degree rules | Workday Academic Requirements Agent | Catalog-year logic, effective dates, exceptions, and regression tests before rules go live | T4 –T5 |
| Transcripts and transfer credit | Workday Student Administration Agent | Parsing accuracy, equivalency confidence, manual review, and an appeal path | T5 |
| Financial aid | Ellucian aid agents; Salesforce Agentforce | Regulatory accuracy, source-of-truth records, and human approval for any award change | T5 |
| Program and curriculum creation | Ellucian Program Studio | Treat output as a draft. A generated compliance statement is not an eligibility determination | T3 –T4 |
Writes that affect registration, standing, credit, or aid score T5 on the Stakes lens, even with per-transaction approval. Approval is one of the T5 controls, not a reason to lower the tier. See the worked hold-resolution assessment.
For fixed eligibility logic, deterministic rules are usually better than an agent. Use agents where permissions, audit trails, human review, and rollback are demonstrably strong.
Controls specific to SIS agents
Inherit the user’s permissions
Check identity and authorization at every tool call. An agent should not run as a broad service account.
Separate read, draft, and write
Document which actions are read-only, draft-only, or write-enabled. An agent that recommends must not quietly gain commit rights.
Preview before commit
Show the proposed record change and require approval for registration, holds, transfer posting, aid, and academic standing.
Make transactions safe to repeat
Require idempotency, transaction boundaries, and handling for concurrency, timeouts, and duplicate calls.
Plan the undo
Every write needs a rollback or compensating action, tested before go-live.
Defend against injected instructions
Transcripts, uploaded documents, and messages can carry instructions. Test for prompt injection and malicious tool responses.
Keep a complete trace
Log the user and agent identity, model and tool versions, policy sources and effective dates, rule checks, tool calls, approvals, timestamps, and before-and-after values.
Keep a hand on the switch
Rate limits, staged rollout, a kill switch, and a named incident owner. MCP or API access alone does not prove authorization or correctness.
Evaluating a vendor’s SIS agent
- Run the same cases on every shortlisted vendor. Use de-identified data: one read-only advising query, one degree or transfer recommendation, and one sensitive transaction.
- Include failure cases. Denied permissions, blocked prerequisites, policy conflicts, concurrent edits, and a rollback.
- Demonstrate in a student tenant. Don’t infer student-agent controls from HR or finance examples on the same platform.
- Measure the task, not the demo. Task success, reversal rate, escalation rate, staff minutes per completed task, and for metered agents, cost per successful outcome including retries.
- Record agent activation separately from SIS go-live. A SaaS migration result is not an agent result.
How to read a vendor’s status claim
- 01
Announced
- 02
Roadmap
- 03
Private preview
- 04
Early access or design partner
- 05
Generally available
- 06
Production customer documented
- 07
Outcome independently validated
Move a feature up only with evidence for that step. A date passing does not make a roadmap item generally available.
Questions to ask before buying
- Which named agents are generally available, which are in preview, and which are roadmap? Answer by product line, version, and hosting model.
- For each agent, which actions are read-only, draft-only, or write-enabled? Can we switch write actions off?
- Does the agent act with the requesting user’s permissions? Where is authorization enforced?
- Which actions require human confirmation, and can we add approval steps?
- Can we export the full trace of a completed task, including proposed versus committed changes?
- How is agent use metered? What happens when credits run out, and do retries count?
- Which named institution has this agent in production, since when, and with what baseline-versus-after results?
- Are prompts, retrieved records, or outputs used to train models? Who are the subprocessors?
Related: the vendor agent in the SIS, LMS, or ERP scenario and the vendor agent due diligence template.
Sources
Synthesized from three AI-assisted public-source research reports on AI in higher-education SIS, prepared 25 October 2026, and the primary sources they cite. Where the reports disagreed, this page uses the more cautious reading.
- Ellucian, 2026 Product Innovation UpdateEllucian · 2026
- Ellucian redefines the economics of AI in higher educationEllucian · Sep 30, 2026
- Responsible AIEllucian · 2026
- Workday Illuminate expands with new AI agents for HR, Finance, and industryWorkday · Sep 16, 2025
- Budget certainty in the age of AI: a new model for higher educationWorkday · Jul 7, 2026
- Sana adoption hubWorkday · 2026
- Workday and Anthropic announce new partnershipWorkday · Oct 13, 2026
- How Oracle is evolving PeopleSoft Campus SolutionsQuest Oracle Community · Jun 16, 2026
- Build an AI-powered PeopleSoft chat assistantOracle · Oct 9, 2026
- Reading the signal at JAM 2026: Jenzabar bets on the fundamentalsThe Tambellini Group · Jul 24, 2026
- Thesis named a Niche Player in the 2026 Gartner Magic QuadrantThesis · Apr 6, 2026
- PeopleSoft agentic OS integrationibl.ai · Mar 12, 2026
- Higher education solutionsMindset Consulting · 2026