Your company has acquired an SAP Business Technology Platform Enterprise Account (a global account of type enterprise, trial users can self-register for a single-user account).
You want to use SAP BTP as integration and extension platform built for the Intelligent Enterprise that enables you to connect your landscape and create application extensions, which focus on your business needs.
You have received two initial emails and you now want to start using the platform. The second email contains the Global Account administrator user, which holds your entitlements to use platform resources and services.
Your global account is either exclusively configured for consumption-based licensing (SAP BTP Enterprise Agreement (CPEA) or SAP Pay-As-You-Go) or for subscription-based licensing. You cannot combine those models in one global account.
What are the first steps you need to perform in order to onboard to your SAP BTP Enterprise Account? What are the initial administrative tasks and decisions which need to be made?
This first “mission” for new enterprise accounts will help answer these questions. You will learn how to set up your global account, sub-accounts, check your entitlements, set-up quotas, and start leveraging your SAP BTP Services.
This blog guides you through your first steps on SAP BTP:
- Check your first mail: IT Contact for your SAP BTP tenant
- Check your second mail: Logon information for your SAP BTP tenant
- Your initial login to your Global Account
- Assigning administrators
- Creating sub-accounts
- Checking your entitlements and assigning quotas
You may also follow this blog in a step-by-step guide on SAP Discover Center: Getting Started with SAP BTP Enterprise Account
1. Check your first mail: The “IT Contact” for your SAP BTP global account
Beforehand you received an email from SAP (from email@example.com) to check the IT contact of your company. The IT contact is the first Administrator, who needs to initially logon to SAP BTP Global Account. Only the IT Contact SAP S-User will have the initial entitlement on the SAP BTP.
2. Check your second mail: Logon information for your SAP BTP global account
You received an additional email from the platform services team shortly before the contract start date. Look for these emails for the confirmation of account setup and access.
It contains an S-user, which can also be used for SAP Store, SAP Support, SAP.com.
The S-user of the Global Account Administrator is attached to your licensed SAP BTP Global Account and your entitlements from your consumption or subscription license. So it is essential, that you login with the correct Global Account Administrator first.
You may check your assigned SAP S-Users (you might have more than one) independent from SAP BTP with SAP ID Service.
Your initial login to your Global Account
Use the link in your Welcome e-mail or follow this link.
It is important, that you login with S-User provided in the Welcome email. Only this S-User is your company’s initial global account administrator and has the entitlements of your order to use the SAP BTP services.
Result: You get forwarded to the SAP BTP Cockpit.
The SAP BTP Cockpit is a web-based administration interface for the SAP BTP.
You see a list of your SAP BTP global accounts, the available regions, and services. For services available in different regions, see also services in SAP Discovery Center (to access the regions map view, choose Show Filters and the (globe) icon)
Assigning additional global account administrators
As Global Account Administrator you can add additional users as global account members using the SAP BTP cockpit.
SAP recommends that you create at least one additional Global Account Administrator who can support or substitute the initial Global Account Administrator if necessary. All global account members have global account administrator permissions for the global account. Adding members to global accounts is only possible in enterprise accounts, not in trial accounts. SAP cannot assign additional user IDs on your company’s behalf.
- Choose the global account to which you’d like to add members.
- In the navigation area, choose Members.
- Choose Add Members.
- Enter one or more e-mail addresses, separated by commas, spaces, semicolons, or line breaks. The users you add as members at the global account level are automatically assigned the Administrator role.
For more information, see SAP Help – Add Members to Your Global Account
SAP BTP Cockpit – global account view, members (2020)
Members of the global account can change the name of the global account. Select the global account for which you’d like to change the display name and select the “Edit”-pencil on its tile.
Check your Entitlements and Quotas
When you purchase an enterprise account, you are entitled to use a specific set of resources, as the amount of memory that can be allocated to your applications.
An entitlement equals your right to consume a resource. A quota represents the numeric quantity that defines the maximum allowed consumption of that resource.
Entitlements and quotas are managed at the global account level, distributed to subaccounts, and consumed by the subaccounts. When the quota is freed at the subaccount level, it becomes available again at the global account level.
For the typical Cloud Foundry Multi-Environment Subaccount, at least the service Application Runtime for the Cloud Foundry runtime is required. In order to run this service, the entitlement Application runtime is required. The quota you can consume and distribute to your subaccounts is your amount of memory.
Within the Cloud Foundry environment, you can create a new space for ABAP development. you need the entitlement ABAP environment.
The Kyma environment is a runtime the developers can use to build cloud-native Kubernetes-based extensions to SAP by using microservices and serverless Functions. If you want to use Kyma, you need in addition the Kyma runtime entitlement.
Check if at least application runtime is available if you want to use Multi-Environment Cloud Foundry. For more information, see Managing Entitlements and Quotas Using the Cockpit in SAP Help Portal.
For a Neo Environment, at least the service SAP BTP Java Server is required. The required entitlement, in order to run the service, is named Java Quota, the Quota is measured as premium, or pro units, which represent basically the amount of memory and CPUs available.
For more information on available services see SAP Discover Center, Services.
Create sub-accounts for your global account
Within your region-independent global account, you can create any number of subaccounts in any environment and region, depending on your contract.
For example, if you’re located in the US, you can create subaccounts in different regions, such as Europe (Rot) or Japan (Tokyo), to support the customers who are using your applications. Subaccounts are independent of each other, which means that each subaccount allows for dedicated quota and member management. You can configure a dedicated identity provider for business users in each subaccount.
Each subaccount is associated with exactly one environment, Multi-environment or Neo, for example.
Decisions for subaccounts:
- Environments: Multi-environment (recommended) or NEO environment or both.
- Regions: Choose the region of your choice
A typical setup for the SAP landscapes is the Staged Development Environment with DEV, TEST, and PROD landscape.
For Cloud Foundry, create one subaccount and 3 cloud foundry spaces for dev, test, and prod. In the NEO environment use 3 subaccounts for dev, test, and prod, typically in one Global Account. For more information, see SAP Help – Setting Up Your Account Model
Create your first BTP Service
Create a Cloud Foundry Subaccount with a Booster
The next typical step is to create a Cloud Foundry runtime subaccount for development, assign entitlements, and add users.
You can perform this step manually or with the help of a small “Booster”. Boosters are a set of guided interactive steps that enable you to select, configure, and consume services on SAP BTP to achieve a specific technical goal.
From the boosters overview page, you can get quick information about the available boosters, see booster details by accessing a booster tile and start boosters.
You can create a common multi-environment subaccount with Cloud Foundry Runtime with the booster “Prepare an Account for Development”, which you can find in the global account view in the SAP BTP cockpit.
Create a Cloud Foundry Subaccount Manually
- From your global account, choose New Subaccount.
- Specify a display name.
- (Optional) Specify a description.
- Select the region, environment, and infrastructure provider of the new subaccount according to your account plan.
Additional fields appear according to the selected environment. Select settings as required. Note: In a subaccount in the Cloud Foundry environment, the subdomain that you specify can be any string. The subdomain can contain only lowercase letters and digits, hyphens (not allowed in the beginning or at the end) and must be unique within the Cloud Foundry environment of SAP BTP.
- (Optional) To use beta features in the subaccount, select Enable beta features.
- Save your changes.
As a result, a new tile appears on the Global Account page with the subaccount details.
For more information see SAP Help – Create Subaccounts In Your Global Account.
Create Organisations and Spaces
Organizations and Spaces are only available in Cloud Foundry sub-accounts.
For each Cloud Foundry subaccount you need to create an organization (1:1 relationship):
- Select the button “Enable Cloud Foundry“.
- Provide a name for the organization.
Once you have an organization, you can create a space:
- In the BTP cockpit navigation menu, choose Spaces.
- Press button “New Space”
- Provide a name. A typical setup is a dev, test, and prod.
For more information, see Create Spaces on help.sap.com
Configure Entitlements and Quotas for Subaccounts
Assign entitlements to subaccounts by adding service plans and distribute the quotas available in your global account to your subaccounts using the SAP BTP cockpit “Entitlements”, “Service Assignments”.
Add Members to subaccounts
In the Neo environment, you manage members in subaccounts. In the Cloud Foundry environment, you manage members at subaccount, org, and space levels.
Roles determine which functions in the cockpit users can view and access, and which actions they can initiate. SAP BTP offers the predefined roles: Administrators and users and a set of predefined roles for connectivity.
SAP ID Service
The default SAP BTP identity provider and application identity provider of SAP BTP is the SAP ID service. Trust to SAP ID service in your subaccount is pre-configured in both the Neo and the Cloud Foundry environment of SAP BTP by default, so you can start using it without further configuration. For more information, see the SAP ID Service.
You are done with your initial configuration of SAP BTP.
You can now continue your journey by setting up additional runtime services (ABAP, Kyma environment), additional services, e.g. for creating Fiori apps or additional BTP applications, like Fiori launchpad or SAP Analytics Cloud.