Enterprises face security, governance, and efficiency gaps when employees use fragmented ChatGPT accounts without shared internal knowledge, role-based access, or telemetry.
ℹ️OpenWebUI Workspace — Unified login interface allowing employees to select specialized department AI Agent profiles (HR, Sales, Accounting, Marketing, IT, Management).
Solution
Built a centralized Enterprise AI Workspace leveraging OpenWebUI as the unified interface, configured with specialized department AI Agent profiles (HR, Sales, Accounting, Marketing, IT, Management). The architecture integrates internal company databases, CRM, ERP (Odoo), and cloud storage (Google Drive/SharePoint) via REST APIs, n8n automations, and Model Context Protocol (MCP).
Architecture / Workflow
01·SSO Authentication
02·Select Dept Agent Profile
03·RBAC & Prompt Injection
04·RAG & MCP Tool Call
05✓LLM Execution & Response
1. Unified Interface & Auth: Employees log in via OpenWebUI with Role-Based Access Control (RBAC) governing accessible department agent profiles. 2. Profile-Based Agent Routing: Each profile injects custom system instructions, domain memory, knowledge bases, and authorized tool bindings. 3. Context & RAG Retrieval: Queries search vectorized internal documents (Qdrant / PGVector) and execute dynamic tool calls via MCP or n8n webhooks for live ERP/CRM queries. 4. Centralized Provider Gateway: Routes prompts to managed AI models (OpenAI, Gemini, Claude, OpenRouter, or self-hosted Local LLMs) with audit logging and telemetry.
1. Unified Interface & Auth: Employees log in via OpenWebUI with Role-Based Access Control (RBAC) governing accessible department agent profiles. 2. Profile-Based Agent Routing: Each profile injects custom system instructions, domain memory, knowledge bases, and authorized tool bindings. 3. Context & RAG Retrieval: Queries search vectorized internal documents (Qdrant / PGVector) and execute dynamic tool calls via MCP or n8n webhooks for live ERP/CRM queries. 4. Centralized Provider Gateway: Routes prompts to managed AI models (OpenAI, Gemini, Claude, OpenRouter, or self-hosted Local LLMs) with audit logging and telemetry.
Business impact
Transforms fragmented AI usage into a secure, governed enterprise AI ecosystem—reducing response times, automating cross-department workflows, and protecting proprietary company data.
Portfolio assistantKai AI Kai AI online
K
Hi, I am Kai AI for Khang's portfolio. Ask about DevOps, AWS, n8n automation, OpenClaw, Hermes Agent, monitoring, backup, or project fit.