The Guest Gave Permission. Is That Enough?
The Wider View · Hospitality
A traveller asks an AI assistant to change a hotel reservation. The arrival date needs to move by one day. The room must remain refundable, and the airport transfer should follow the new flight schedule.
The instructions are clear. The assistant may be capable of understanding them and identifying the necessary changes. But that does not mean the changes have been accepted.
The hotel may require the request to come through an authorised booking channel. The original rate may not permit the new dates. The transfer provider may need a separate confirmation. The traveller has given permission to the assistant. Whether that permission is sufficient to complete the transaction is a different question. I explored how AI assistants are changing hotel discovery in When the Guest Stops Searching and Starts Delegating the Trip. Here the question moves beyond search: who is authorised to act on a guest’s instructions, and what has the hotel actually confirmed?
Two Airlines, Different Boundaries
On November 11, 2026, United Airlines announced measures to restrict access by unauthorised third-party AI agents and personal assistants. The restrictions concern access through the airline’s digital platforms and indirectly through travel agencies and aggregators.
United cited concerns about customer information, unintended purchases, changes to accounts and the use of loyalty miles. The company also warned that some automated actions could create difficulties with aviation requirements, including acknowledgements passengers must make during check-in. The decision concerns unauthorised AI agents. It is not a prohibition on using AI to research travel.
Other companies are exploring authorised integrations. On October 6, Southwest Airlines announced a ChatGPT integration that allows travellers to discover destinations and explore available flights. The initial service supports flight search and shopping, with customers directed to Southwest to complete purchases. It does not establish that an assistant can independently complete every stage of a reservation.
Accommodation platforms are developing their own capabilities. On October 28, Expedia Group announced new AI-supported features across Expedia, Hotels.com and Vrbo, including natural-language search, property-specific answers and more detailed hotel comparisons.
These services do not all perform the same functions. Some help travellers find information. Others assist them in understanding existing bookings or reaching customer support. The ability to complete or modify transactions depends on the particular service and its permitted connections.
The important change is not that travel companies have reached a common position on AI. It is that they are beginning to define more explicitly which activities automated assistants may perform within their systems.
Permission Does Not Automatically Transfer
When a guest uses an AI assistant, several separate decisions may be involved. First, the traveller decides what the assistant is allowed to do. That permission might be limited to researching hotels, or it might extend to selecting options and requesting transactions.
Second, the travel provider determines which external systems are authorised to access its services and perform particular actions. An assistant may be allowed to examine published information without being permitted to access a customer account, purchase a room or cancel an existing reservation.
Third, the provider must accept the transaction under the applicable conditions. These distinctions are essential. A guest can authorise an assistant to request a cancellation. That does not mean the reservation is refundable or that the cancellation has been processed.
Likewise, a hotel can make its rates available through an approved booking channel without authorising every automated tool that wishes to use that channel. The permissions may overlap, but they are not interchangeable.
Hotels already operate with similar distinctions when working with travel agencies, corporate booking systems and other intermediaries. AI introduces new ways to initiate actions. It does not remove the need to establish who is permitted to perform them.
A Request Is Not a Confirmed Service
Consider a traveller who asks an assistant to reserve a room with two separate beds, breakfast included and late checkout. The assistant may find a suitable rate and transmit the request through an approved booking process. The reservation could be completed successfully while some of the requested arrangements remain unconfirmed.
Breakfast may be included in the purchased rate. The bed configuration may be subject to availability. Late checkout may require approval closer to departure. All three details appeared in the original instruction, but they do not necessarily have the same contractual status.
This is not a problem unique to AI. Hotels have long dealt with differences between guaranteed inclusions, special requests and services that depend on availability. The introduction of automated assistants makes accurate communication of those distinctions more important.
A system should not present a requested service as confirmed merely because it successfully transmitted the request. For hotel staff, the relevant information is what the business has actually accepted. A preference recorded in a message is not the same as a commitment recognised by the reservations department.
The difference becomes particularly important in resorts, where accommodation may be sold together with meal plans, transfers and other services that involve several departments.
The Difficult Part May Come After Booking
Creating a reservation is only the beginning of the relationship. Guests change dates, adjust occupancy, request additional services and sometimes cancel. An automated assistant managing an itinerary may be asked to handle several of these changes.
Coordinating a request is different from completing transactions across independent service providers. Each provider may have different booking conditions, payment arrangements and approval procedures.
An assistant capable of handling several services should be able to communicate which actions have been confirmed and which remain unresolved. For the hotel, it is equally important that an attempted change does not become confused with an accepted one.
Otherwise, the Front Office may prepare for an arrival that has not actually been rescheduled, or a transfer team may act on information that was never formally confirmed. The technology should help maintain consistency across the journey, not create additional uncertainty about what has been agreed.
When Something Goes Wrong, Who Can Correct It?
A reservation system normally records the booking channel, dates, rate conditions and other details needed to manage a stay. AI-assisted transactions do not remove the need for that record. They may make it necessary to clarify additional information: which authorised channel submitted a change, whether it was accepted and where responsibility lies if an action was incomplete.
Not every employee needs access to the technical details of an AI integration. The reservations team does need to know whether a booking exists and which conditions apply. The Front Office needs reliable information about confirmed changes. Finance must be able to identify the payment and refund arrangements. Guest relations needs an appropriate route for resolving disputes.
These responsibilities are familiar. What changes is the possible distance between the guest’s instruction and the transaction received by the property. A traveller may believe that an assistant has taken care of everything, while the hotel’s systems show only part of the requested changes.
A dependable process should make it possible to determine where the transaction stopped and who can complete or correct it. That does not necessarily require more personal information to be collected. It requires accurate records and appropriately controlled access to the information needed for the task.
There should also be a practical route to human assistance when an automated process cannot resolve an exception. The guest should not have to understand the technical relationship between an assistant, an intermediary and a hotel simply to establish whether a reservation has been changed.
Assistance Is Not the Same as Autonomy
Hospitality companies are increasingly adopting AI, but the industry’s readiness for autonomous decisions should not be overstated. The State of Distribution 2026 report, developed by RateGain, the NYU School of Professional Studies and HEDNA, examined commercial operations across more than 270 hotel brands representing over 58,000 properties in 53 countries. Published in September 2026, the research found that more than half of the hotels represented were using or procuring generative AI. Yet fewer than one in ten reported reductions in manual work exceeding 30 percent. The underlying survey examined commercial operations during the period from December 2024 to November 2025. It does not measure how many reservations are now completed by autonomous AI agents.
The research identified continuing problems with fragmented systems, manual processes and confidence in allowing AI to operate independently. A hotel may find AI useful for answering questions, preparing reports or supporting commercial analysis without being ready to let external systems change live reservations.
Those are different levels of responsibility. The decision to automate a task should reflect its consequences, the reliability of the systems involved and the ability of employees to intervene. A useful AI assistant does not necessarily need unrestricted authority to be valuable.
What Hotels Should Ask Their Distribution Partners
Most hotels depend on technology providers and intermediaries to distribute their rooms. Booking engines, channel managers, online travel agencies and property-management systems already exchange information under established agreements. As automated assistants become part of these processes, hotels have reason to review what their partners actually support.
Can an external assistant create a reservation through an approved connection? Can it modify or cancel that reservation? How are payment details protected? Which actions require additional customer confirmation? Equally important is what happens when a request cannot be completed. Does the system return a clear response? Can the customer or an authorised employee identify the outstanding action? Is there a procedure for resolving conflicting information between services?
These questions do not imply that every hotel needs to develop its own AI infrastructure. Many will continue relying on established technology and distribution partners. The responsibility of hotel management is to understand which commitments those partners can make on the property’s behalf and how the resulting reservations will be handled.
The answer will differ according to the business model, contractual arrangements and applicable regulations. Airlines and hotels do not operate under identical requirements, and United’s decision should not be treated as a policy that every accommodation provider must adopt. It does, however, illustrate why permission and access are becoming commercial and operational matters rather than questions left entirely to technology departments.
The Commitment That Reaches the Hotel
AI assistants may make travel arrangements easier. They can reduce repetitive searches, help travellers understand complex offers and potentially coordinate services that would otherwise require several separate interactions. Those benefits are worth developing.
But searching, requesting and confirming remain different activities. A traveller’s permission establishes what the assistant has been asked to do. It does not automatically establish what a hotel, airline or intermediary has accepted. For hospitality businesses, the challenge is to preserve that distinction while making the experience as convenient as possible.
An assistant may eventually carry out much of the work that a traveller once completed personally. The hotel still has to deliver the room and services that were actually booked.
At arrival, what matters is not what the assistant intended to arrange. It is what the property has agreed to provide.
Sources
United Airlines, November 11, 2026: United Restricts Access for Third-Party AI Agents
Southwest Airlines, October 6, 2026: Southwest Airlines Launches ChatGPT Integration
Expedia Group, October 28, 2026: Fall 2026 Product Release
NYU SPS, RateGain and HEDNA, September 15, 2026: The State of Distribution 2026
Editorial note: This article draws on publicly available industry research and sources cited above. Interpretation and editorial analysis are by Cristian Marino Journal.
About the Author
