Topic coverage

Security

Source-linked reporting and practical patterns organized around a shared enterprise applications question.

Latest reading

Four workers in overalls fit separate sections of a metal gate together in a workshop yard.

SAPAI & Agents

SAP puts its agent containment work into OpenShell

SAP's four contributions to the OpenShell agent runtime are containment and operability engineering, and the runtime is free only through October.

BizAppsVerse editorial deskSeptember 28, 2026 5 min read

A woman in a storeroom counts stacked wooden crates on tall metal shelves under a single ceiling light.

MicrosoftGovernance

Copilot Managed Runtime puts generated apps under policy

Microsoft now hosts Copilot-generated code inside the tenant boundary, and the admin center inventory matters more than the hosting does.

BizAppsVerse editorial deskSeptember 25, 2026 5 min read

A locksmith cuts a spare key at a workbench while a customer waits nearby holding the original key.

OracleIdentity

Oracle Health outsources identity proofing to ID.me

An Oracle press release pairs undated patient intake with prescriber credentialing that ships now. The reusable credential model is the part worth copying.

BizAppsVerse editorial deskSeptember 24, 2026 5 min read

Two people stand beside a metal gate in a warehouse corridor while one of them turns a key in the lock.

SAPSecurity

SAP's ODP-RFC flaw now shows up in EarlyWatch Alert

An ODP security check has landed in SAP EarlyWatch Alert, putting a June note about unchecked RFC callers in front of people who never read the patch queue.

BizAppsVerse editorial deskSeptember 24, 2026 5 min read

A warehouse supervisor tries a key in a grey door lock while a colleague waits in the corridor behind her.

ServiceNowSecurity

Brazil stops catalog roles granting access through ACLs

Most of ServiceNow's Brazil deprecation list is a planning signal. One line is a live change to how catalog role ACL grants work on upgrade.

BizAppsVerse editorial deskSeptember 23, 2026 5 min read

An open doorway at the end of a long empty corridor with a chair pushed against the wall beside it.

MicrosoftAI & Agents

Dynamics 365 ERP MCP server ships ahead of its controls

Microsoft's Dynamics 365 ERP MCP server is generally available, while the role-based access controls written for agent use are still described as coming.

BizAppsVerse editorial deskSeptember 23, 2026 5 min read

A long corridor of identical closed office doors with one brass key lying on the carpet outside them.

MicrosoftSecurity

Microsoft pays double for cross-tenant Power Platform bugs

Microsoft's updated Power Platform bounty schedule pays double for critical cross-tenant flaws and names Dataverse twice. Here is what an admin should check.

BizAppsVerse editorial deskSeptember 21, 2026 5 min read

An empty office desk with a cardboard box of personal belongings on top and a ring of keys left beside it.

MicrosoftAdministration

Power Pages now offers Microsoft-managed certificates

Microsoft now provisions and renews SSL and TLS certificates for Power Pages custom domains, but the option does not appear when CDN or WAF is enabled.

BizAppsVerse editorial deskSeptember 20, 2026 4 min read

A locksmith removes keys from four separate key cabinets mounted along a workshop wall.

ServiceNowAI & Agents

ServiceNow's kill switch reaches into Okta, GCP and AWS

ServiceNow's new agent kill switch orchestrates credential revocation across Okta, GCP and AWS. What the post does not say matters more.

BizAppsVerse editorial deskSeptember 20, 2026 5 min read

A traveler with a rolling suitcase pauses at an airport help desk while a uniformed staff member answers a question.

SalesforceAI & Agents

The TSA number inside Salesforce's Missionforce year one

Salesforce says TSA's Ace agent resolves 96% of roughly 100,000 monthly traveler conversations without escalation. That rate deserves a second look.

BizAppsVerse editorial deskSeptember 19, 2026 5 min read

A technician kneels beside an open server rack in a data hall, tracing a bundle of cables by hand.

ServiceNowSecurity

ServiceNow's shift zero and the AI tools CIOs can't see

Three quarters of CIOs told diginomica they can't see every AI tool in their systems. ServiceNow's shift zero pitch depends on data they don't have.

BizAppsVerse editorial deskSeptember 18, 2026 4 min read

A loan officer reviews documents at a desk while a computer screen glows with an open case file in the background.

ServiceNowAI & Agents

ServiceNow's newest agents are Experian's, not its own

ServiceNow will run Experian's risk and identity agents on live loan and claims decisions, but Experian built and controls them.

BizAppsVerse editorial deskSeptember 17, 2026 4 min read

A server rack in a dim data center with a technician reviewing a paper checklist under fluorescent light.

OracleSecurity

Oracle shipped 63 patches for a legacy Siebel CRM

Siebel CRM took 63 patches in Oracle's latest Critical Patch Update, a sign the platform isn't as dead as budget plans assume.

BizAppsVerse editorial deskSeptember 17, 2026 3 min read

A person at a desk cross-referencing a printed access log against settings displayed on a laptop screen.

SalesforceAI & Agents

Claudeforce's 37 skills turn a preview into a permissions problem

Salesforce put a number on Claudeforce at Dreamforce 2026, 37 sales skills running through an MCP server in Claude, and that number is a permissions question first.

BizAppsVerse editorial deskSeptember 16, 2026 4 min read

A red emergency stop button under a glass cover mounted beside a bank of unlit alarm switches in an empty security control room.

ServiceNowAI & Agents

ServiceNow's autonomous security specialists go live

The autonomous security specialists ServiceNow previewed in June reach general availability today, and the checklist for trusting them is still thin.

BizAppsVerse editorial deskSeptember 15, 2026 4 min read

A security administrator reviews rows of server status lights in a dim data center at night.

OracleSecurity

Reading Oracle's September patch list in the right order

Oracle September update shipped 673 patches, but the number that matters is how many are reachable without a login, and Oracle already named where that risk concentrates.

BizAppsVerse editorial deskSeptember 15, 2026 6 min read

A server room hallway lined with equipment racks, one cabinet door left open while the rest stay closed and locked.

OracleSecurity

Oracle's 240 unauthenticated bugs are a network design signal

Oracle's September update fixed 240-plus flaws needing no login at all. That says less about Oracle's code than what stays reachable from the open internet.

BizAppsVerse editorial deskSeptember 15, 2026 6 min read

An administrator at a desk holds up one ring of keys beside an open folder of old access request forms and a closed steel door.

ServiceNowAI & Agents

ServiceNow MCP servers still run on your roles and ACLs

ServiceNow's MCP servers keep ACL and role enforcement in place, so what an agent can do is decided by the role model your instance already has.

BizAppsVerse editorial deskSeptember 13, 2026 4 min read

One person at the head of a long table reads an open folder while string runs from it to six empty chairs.

SalesforceAI & Agents

Salesforce's Trusted Context is the real boundary for agents

Salesforce's six-part enterprise AI model lists Trusted Context first. Our read: what an agent can see and understand is the limit of what it may do.

BizAppsVerse editorial deskSeptember 11, 2026 4 min read

A gate officer at a loading dock barrier inspects the pass and the open crate on a hand truck before the delivery goes inside.

ServiceNowAI & Agents

ServiceNow AI Gateway puts agent policy at the tool call

ServiceNow's AI Gateway enforces policy as an agent invokes an MCP tool. Here is which rules belong at that layer and which still belong to the record.

BizAppsVerse editorial deskSeptember 10, 2026 5 min read

A reviewer at a plain desk peels one multi-part receipt into its copies under a lamp while a spindle of unsorted slips waits beside her.

SalesforceAI & Agents

What Salesforce's AI Control Plane needs to explain one action

Salesforce's AI Control Plane will observe agent behaviour and outcomes. Explaining a single action needs a per-call record the post never describes.

BizAppsVerse editorial deskSeptember 9, 2026 5 min read

A sales manager holds a typed deal summary next to the team's handwritten stage checklist pinned on a meeting room wall.

SalesforceAI & Agents

Claudeforce prebuilt skills carry someone else's sales process

Salesforce in Claude ships 37 prebuilt sales skills. Each one encodes a definition of deal health and pipeline review that your org may not share.

BizAppsVerse editorial deskAugust 30, 2026 4 min read

A receptionist hands individual photo badges to a queue of sales staff while a single master key hangs untouched on the wall behind her.

SalesforceAI & Agents

Claudeforce should leave permission ownership inside Salesforce

Salesforce says an admin connects Salesforce in Claude once and permissions are managed centrally. Whose identity each action runs under is the question to ask.

BizAppsVerse editorial deskAugust 29, 2026 4 min read

A clerk at a records counter hands over a thick folder while a second window behind a locked gate has a stamp, a ledger, and a queue.

SalesforceAI & Agents

Claudeforce solves the read path and leaves you the write path

Salesforce in Claude reads CRM and Slack data through one admin connection. Governing the writes, where business rules and side effects live, is the hard part.

BizAppsVerse editorial deskAugust 28, 2026 4 min read

A seller at a desk by a window passes a signed form through a hatch into a records room where a clerk stamps it.

SalesforceAI & Agents

What Claudeforce has to preserve when sellers work in Claude

Salesforce says Claudeforce routes actions through its rules. Here is what the trust boundary must still carry when a seller never opens Salesforce.

BizAppsVerse editorial deskAugust 27, 2026 4 min read

A platform owner with a clipboard holds a heavy office door open while a queue of sales reps waits in the corridor behind her.

SalesforceAI & Agents

What the Claudeforce open beta asks of a Salesforce team

Salesforce says Claudeforce moves from select pilots to open beta in September 2026. What a Salesforce team should settle before sellers connect Claude to CRM.

BizAppsVerse editorial deskAugust 26, 2026 4 min read

Analysis and architecture

View all

A caretaker turning a heavy brass key in the lock of a wooden door at the top of a narrow staircase.

SalesforceIdentity

Designing a Salesforce sharing model that still scales

Salesforce sharing only ever adds access, and the platform stores the result. How to set the baseline, the hierarchy and the rules so growth stays affordable.

Amani ReedSeptember 27, 2026 6 min read

A groundskeeper opening a tall metal gate in a garden wall while holding a heavy ring of keys.

MicrosoftIdentity

Dataverse security that survives ten times the size

Business units, depth, teams and sharing decide whether a Dataverse security model survives growth. How to design each one so it still makes sense later.

Elliot ParkSeptember 25, 2026 6 min read

A supervisor stands at a plant counter holding a ring of keys beside a row of closed storeroom doors.

SAPAI & Agents

Grounding Joule starts with the authorisation model

An assistant grounded in SAP data is only safe if it inherits the authorisation check rather than retrieving broadly and filtering the results afterwards.

Noah ValeSeptember 25, 2026 6 min read

A woman passes a bunch of keys across a workshop bench to a colleague who is already holding two other bunches.

MicrosoftSalesforceIdentity

Movers break the identity lifecycle across business apps

Provisioning is the easy part. Transfers add access and almost never remove it, and every application keeps entitlement in a model of its own.

Priya NwosuSeptember 24, 2026 6 min read

A locksmith cuts a duplicate key at a workbench while a second key hangs on a hook behind him.

MicrosoftIdentity

Power Pages identity decisions that are hard to undo

A Power Pages site authenticates against an identity provider and authorises against a Dataverse contact. Matching the two on email is the mistake that lasts.

Elliot ParkSeptember 22, 2026 6 min read

An operations engineer sits alone at a desk late at night with a mug beside her, tracing cables at the back of a server rack.

MicrosoftSalesforceIdentity

Service accounts are the least governed identity you run

Integration accounts miss every joiner and leaver process. Give each one a named owner, a readable name, narrow scopes and a rehearsed rotation.

Priya NwosuSeptember 20, 2026 6 min read

A facilities worker collects a lanyard badge at a reception desk while a second unclaimed badge lies beside the keyboard.

SalesforceIdentity

Identity architecture when you run two Salesforce orgs

When a company runs more than one Salesforce org, single sign on is the easy part. The gap audits find sits in deprovisioning across two login domains.

Priya NwosuSeptember 19, 2026 6 min read

A dim server room aisle with one empty rack slot between rows of blinking equipment.

ServiceNowITSM

The CMDB two teams claim and nobody owns

When ITSM and security both claim the CMDB, reconciliation becomes everyone's second job, and nobody notices a stale record until a remediation deadline depends on it.

Amani ReedSeptember 15, 2026 6 min read

A facilities manager at an open key cabinet holds up one key with a paper tag while rows of untagged keys hang on the hooks behind her.

MicrosoftServiceNowIdentity

Give every Dataverse access exception an owner and an expiry

Access exceptions in Dataverse and ServiceNow outlive their reason. Give each one a named owner, an end date, and a record small enough to review.

Amani ReedAugust 21, 2026 6 min read

A service desk manager reaches for a large stop lever mounted on the wall beside a conveyor of paper tickets.

MicrosoftServiceNowAI & Agents

AI agents need a pause button someone can actually reach

A pause control with an owner, a written reason, and a resume record should be an ordinary operating control for Copilot Studio and ServiceNow agents.

Amani ReedJune 1, 2026 6 min read

Related guides

View all

Two warehouse workers pause at the end of an aisle beside a stack of boxes as a supervisor sorts a crowded ring of keys.

SAPAdministration

Why users see the wrong set of Fiori launchpad tiles

Content assignment decides what a user sees, authorisation decides what runs, and the two drift apart unless you design roles around the job.

Noah ValeSeptember 27, 2026 7 min read

A man in an office corridor tries a key in a door while a colleague stands behind him holding several more keys.

OracleHCM

Oracle Fusion HCM roles and who can see salary data

Function access decides what someone can do. The security profile decides whose records they do it to. Most Fusion HCM exposures live in that gap.

Priya NwosuSeptember 25, 2026 7 min read

A man tries keys from a large ring in the lock of a corridor door while a colleague waits beside him.

SAPHCM

SuccessFactors role-based permissions and target populations

A permission role says what may be done and a group says who does it. The assignment binds granters to a target population, and that pairing is where access breaks.

Noah ValeSeptember 24, 2026 7 min read

A greenhouse worker carries one tray of seedlings through a gate while the rest of the benches stay behind the locked fence.

MicrosoftAnalytics

Power BI row-level security for Dataverse data

A Power BI import carries everything the refresh account could read. Rebuild the row filters, maintain the mapping table, and test as a restricted user.

Elliot ParkSeptember 23, 2026 7 min read

A man in an office corridor tries the handle of a side door while a colleague checks a ring of numbered keys.

MicrosoftSecurity

What to check before a Power Pages site goes public

A table permission granted for one page applies everywhere that table can be reached. Check the whole surface before a Power Pages site faces the internet.

Elliot ParkSeptember 22, 2026 7 min read

A woman at a desk in a small finance office signing a printed payment report beside a stack of paper invoices.

SAPOracleSecurity

Segregation of duties when the team is too small

When finance is too small to split creating a vendor from paying one, pick the two conflicts that carry the money and mitigate them in writing.

Priya NwosuSeptember 20, 2026 6 min read

Two colleagues at a conference room table sorting printed pages into stacks beside an open laptop and coffee cups.

SalesforceCRM

How to run a Salesforce permission audit that sticks

A working method for auditing Salesforce profiles and permission sets, and removing the access you find without breaking someone's Monday.

Priya NwosuSeptember 18, 2026 6 min read

A systems administrator sits at a desk comparing a paper checklist against a bank of monitors showing server status lights.

OracleSAPSecurity

How I order a patch bulletin when everything on it says critical

Oracle and SAP both ship bundles where nearly every entry claims top severity. Here is the four-question order I actually use to triage them for real.

Elliot ParkSeptember 16, 2026 7 min read

One person alone in an emptied office late in the day, hand hovering over a wall-mounted stop switch.

MicrosoftSalesforceAI & Agents

The readiness check before an agent pilot grows

Before a Copilot Studio or Agentforce pilot gets more users, check it has four named owners, a visible failure path, and a review date.

Priya NwosuAugust 2, 2026 6 min read