Audit scope
What does Blueprint AI audit?
Each scan authenticates to a tenant, calls read-only OData / Dataverse APIs, evaluates the rule pack for that platform, and writes findings with the exact records that triggered each rule.
Auth
OAuth 2.0
Client credentials / Azure AD app — read-only scope.
Data accessed
Config + master
Customizing tables, master data, security setup. No PII bulk extracts.
Active rules
— / —
Seeded in DB / shipped in code.
Evidence
Per finding
Each finding stores the OData/Dataverse URL and the offending record IDs.
SAP S/4HANA (on-prem / classic)
Configuration audit over OData services exposed by S/4HANA on-prem. Reads master data, customizing tables, and key transactional snapshots.
Data source: OData /sap/opu/odata/sap/* + $metadata
0
Active rules
No rule packs registered yet for this platform.
SAP S/4HANA Private Cloud (RISE)
Deep configuration audit for RISE landscapes across FICO, MM, WM, SD, PM/EAM, PS plus core platform rules.
Data source: OData /sap/opu/odata/sap/* + $metadata (RISE)
0
Active rules
No rule packs registered yet for this platform.
SAP S/4HANA Public Cloud / FSM
Public-cloud and Field Service Management configuration audit via OData APIs.
Data source: OData /sap/opu/odata4/sap/* + FSM APIs
0
Active rules
No rule packs registered yet for this platform.
Microsoft Dynamics 365
Security, compliance and governance audit over Dataverse. Reads roles, users, audit settings, and field-level security.
Data source: Dataverse Web API /api/data/v9.2/* + WhoAmI
0
Active rules
No rule packs registered yet for this platform.
Want the full per-rule list with severity, evidence fields and recent activity? Open Rule Coverage.