Where this fits
Authorization-aware AI belongs in any SAP support assistant, retrieval workflow, ticket summarizer, or agent that reads operational data.
Common issues
- The AI has broader data access than the user asking the question.
- Retrieved context leaks company-code, plant, customer, supplier, finance, or personnel information across boundaries.
- The model suggests an action the user could not perform in the source system.
Diagnostic questions
- Whose authorization context is used for retrieval?
- Can the answer reveal data indirectly through summaries or aggregates?
- Is every action recommendation routed through human approval and system authorization?