Need Info on System Owner Permissions for SAC,DSP

[YuZhang]

Hey everyone, we’re currently examining the permissions for SAP Analytics Cloud and Datasphere and are trying to understand how these differ from other roles. Our main focus is identifying tasks that specifically require System Owner permissions. For example, we’re aware that only system owners have the authority to modify settings like SSO and SAML. However, our documentation doesn't provide a clear outline of all the exclusive tasks and limitations. Can anyone provide insights on what exactly system owners can do that others can't? Any guidance or pointers would be greatly appreciated!

[TuncayKaraca · Accepted solution]

Hi @YuZhang,

This is how I see it.

System Owner for Datasphere: "Includes all user privileges to allow unrestricted access to all areas of the application. Exactly one user must be assigned to this role." Check out Standard Roles Delivered with SAP Datasphere Yes, only System Owner can do Enabling a Custom SAML Identity Provider - DW Administrator can temporarily become System Owner if needed. Also usually this SAML configuration one-time thing. I think all other admin task can be done by users who have DW Administrator role.

System Owner for SAP Analytics Cloud: "Includes all user privileges to allow unrestricted access to all areas of the application. Only one user in the system can be assigned to this role, and it must always be assigned to a user." Check out Standard Application Roles. Yes, only System Owner can do Enable a Custom SAML Identity Provider - Admin can temporarily become System Owner if needed. Also usually this SAML configuration one-time thing. I think all other admin task can be done by users who have Admin role.

Regards,
Tuncay