Copilot Borrows Joule's Eyes: How the SAP–Microsoft Integration Actually Gates Your Data
We're two PhD students who run SAP AI Lab — one of us researches ML systems, the other enterprise information systems. Independent blog, no endorsement from SAP or Microsoft, and we like asking the questions enterprise architects ask at 2 a.m. Ours, this autumn: a friend managing a mixed SAP/M365 estate said "we bought Copilot licenses, so SAP data is in Copilot now, right?" It isn't, and the…
The SAP–Microsoft integration allows for a bidirectional flow between the two platforms when it comes to using Copilot. When a user types a request to Copilot, such as asking to view open purchase orders that are overdue, the answer is displayed back in the chat. However, the data accessed by Copilot is limited to what the mapped SAP user is authorized to see.
This bidirectional integration is achieved through identity trust, with the request path going through Entra ID authentication of the Microsoft 365 user, mapping that identity to their SAP user, and then Joule executing against S/4HANA under that SAP identity. The permission levels in Joule are aligned with those on the Web, ensuring that no unauthorized data is accessed.
A support ticket highlighted a common issue where a supported question returns no data for one user but works for another. This is expected behavior, indicating that the user either lacks the necessary SAP role or their Entra/SAP provisioning has not been completed. Licensing requirements include having both Microsoft 365 Copilot seats and SAP entitlements for Joule.
SAP's Business AI activation is driven through the AI Activation Dashboard in SAP for Me, while the legacy activation path has been deprecated since May 1, 2026. Azure OpenAI infrastructure is used to serve the Azure OpenAI models that underpin Joule scenarios. Prompt retention specifics and English-language SAP press items are not documented in the sources available.
Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
