AETERION

    SAP

    SAP S/4HANA integration

    ERPAvailable

    BRAIAN connects to SAP S/4HANA through OData / SAP API Business Hub, service user. Agents can invoice retrieval and matching, purchase order lookup and vendor master read. Every action is scoped by the permissions granted to the integration and executed under a versioned policy. Each one is recorded in the audit log with the agent, timestamp and record touched.

    What can BRAIAN do?

    FinAgent and RiskAgent work on the financial and purchasing documents held in SAP S/4HANA: invoices, purchase orders and vendor master data. Postings are scoped by company code and executed only where the policy in force allows a write.

    CapabilityAgentRead or write
    Invoice retrieval and matchingFinAgentRead
    Purchase order lookupFinAgentRead
    Vendor master readRiskAgentRead
    Journal entry postingFinAgentWrite
    Payment proposal reviewFinAgentRead

    How does it connect?

    Connection method
    OData / SAP API Business Hub, service user
    Credential
    A dedicated SAP service user with an OData authorisation profile. No named end-user account is used.

    Credentials are held in an encrypted secrets store. BRAIAN never stores end-user passwords.

    Which permissions are required?

    • read FI-APAccounts payable documents: invoices, credit notes and their clearing status.
    • read MM-PURPurchasing documents required to match an invoice to its order and goods receipt.
    • write FI (scoped by company code)Posting rights limited to the company codes the configured processes cover.

    Permissions are requested at the minimum scope the configured processes require. Unused scopes are not granted.

    Which processes use it?

    Processes that run on this connection, and the domains they belong to.

    • Invoice reconciliation

    • Expense audit

    • Supplier onboarding

    How do you revoke access?

    Access is revoked in SAP S/4HANA itself — by disabling the credential or removing the granted scopes — or in BRAIAN by disconnecting the integration. Processes already running stop at their next call to SAP S/4HANA and are held for review rather than completed with partial data; the interruption and the state of each process are recorded in the audit log.

    FAQ

    Does BRAIAN store data from SAP S/4HANA?

    BRAIAN reads what a process needs, when it needs it. Records retrieved from SAP S/4HANA are held only for the duration of the process and in the audit trail of the actions taken; SAP S/4HANA remains the system of record.

    What happens if the connection fails mid-process?

    The process stops at the failed step and is held for review. Nothing is written twice: completed writes stay recorded in the audit log and the remaining steps resume only once the connection is restored.

    Can permissions be scoped per agent?

    Yes. Scopes are defined per agent, not per system, so one agent can read while another cannot, on the same connection to SAP S/4HANA.