🟢 EU / EEA data boundary · 🔴 outside EU · ⚪ unverified. Note: region shows where the agent
environment is hosted — the AI models agents invoke (e.g. Anthropic Claude, OpenAI) may
process prompts outside the EU Data Boundary regardless of tenant region. Verify model residency
separately for EU compliance.
Run a live scan (your sign-in, your access)▾
Pre-filled with the published multi-tenant app. For a single-tenant app registration, enter your own Client ID and its home tenant (ID or domain) — leave the tenant as organizations for a multi-tenant app, otherwise sign-in fails with AADSTS650059.
App registration requirements
This tool's own app:96e9b5f4-e974-4355-ae9f-4487099ef210
API permissions (delegated) — API permissions → Add a permission:
Microsoft Graph → User.Read — sign-in only.
Dynamics CRM → user_impersonation — required; reads agents from Dataverse and discovers environments. Found under APIs my organization uses → Dynamics CRM (00000007-0000-0000-c000-000000000000). Without it every environment fails with AADSTS650057.
Then Grant admin consent. Coverage is still limited to environments where your account holds a Dataverse security role — permissions alone don't grant data access.