AI agents do not just need access to ERP data. They need limits on what they can do with it, and Microsoft’s latest Power Platform updates push that governance question down to the action level.
Microsoft moved to harden how Power Platform governs SAP connectivity in June 2026, pairing a new connector governance model with a wave of refreshed SAP documentation. On June 4, Microsoft published the general availability of Advanced Connector Policies for Power Platform, then detailed extensive SAP guidance updates in its June 11 feature update.
Together, the releases reinforce Power Platform’s position as the governed integration layer for SAP environments running AI agents.
Connector Governance Moves to the Action Level
Advanced Connector Policies replace the classic data loss prevention framework with allowlist-based governance at the action and Model Context Protocol (MCP) server level. Microsoft applies a single policy per environment, inherited from an environment group or set directly on the environment.
The model lets administrators control which connectors are allowed, as well as specific SAP connector actions and MCP servers AI tools are permitted to use. Microsoft describes the design as a streamlined mental model where every environment has at most one policy in effect.
AI Agents Create a New ERP Access Risk
Microsoft positions the shift as addressing a new compliance surface created by AI agents reaching into SAP systems. The company notes that what enterprises need to govern is no longer just which connectors, but which actions and MCP servers inside them that AI tools utilize.
That distinction matters for SAP tenants, where the SAP ERP connector and SAP OData connector now fall under the same action-level governance framework. The policy model gives Power Platform administrators a way to scope agentic access to SAP Precisely rather than at the connector level alone.
Microsoft Tightens the SAP Deployment Playbook
The June 11 feature update confirmed 27 or more SAP documentation pages refreshed across the Power Platform administration section. Pages covered include the SAP Procurement template, SAP Supplier Self Service, the SAP Setup Assistant, authentication configuration for SAP solutions, and Microsoft Entra ID single sign-on for the SAP OData connector.
The same release introduced a Power Platform inventory public preview that shows connectors and operations used by every app, flow, and agent. The coordinated refresh signals a deepening of Power Platform’s SAP integration guidance alongside the new governance controls.
What This Means for ERP Insiders
ERP teams need action-level access controls. Microsoft’s Advanced Connector Policies show how governance is moving beyond whether an app, flow, or agent can use a connector at all. CIOs, integration leaders, and platform administrators should define which ERP actions agents can perform before scaling low-code automation across finance, procurement, supply chain, and operations.
Governance teams need connector visibility before they write policy. Power Platform inventory gives administrators a way to see which apps, flows, and agents rely on SAP connector operations. ERP leaders should map existing connector usage before applying new restrictions, because hidden dependencies can break business workflows or leave unmanaged access in place.
AI access will become an ERP platform selection test. Microsoft’s SAP documentation refresh and action-level governance updates show that ERP connectivity is now being judged by security, authentication, SSO, policy enforcement, and audit readiness. Buyers evaluating integration and automation platforms should test how precisely each platform can govern agent access to ERP systems, not just whether it can connect.
Editor’s note: A version of this article was originally published on SAPinsider on 6/24.
