Your company has acquired an SAP Cloud Platform Enterprise Account (a global account of type enterprise, trial users can self-register for a single-user account).
You want to use SAP Cloud Platform as integration and extension platform built for the Intelligent Enterprise that enables you to connect your landscape and create application extensions, which focus on your business needs.
You have received two initial emails and you now want to start using the platform. The second email contains the Global Account administrator user, which holds your entitlements to use platform resources and services.
Your global account is either exclusively configured for consumption-based licensing (SAP Cloud Platform Enterprise Agreement (CPEA) or SAP Pay-As-You-Go) or for subscription-based licensing. You cannot combine those models in one global account.
What are the first steps you need to perform in order to onboard to your SAP Cloud Platform Enterprise Account? What are the initial administrative tasks and decisions which need to be made?
This first “mission” for new enterprise accounts will help answer these questions. You will learn how to set up your global account, sub-accounts, check your entitlements, set-up quotas, and start leveraging your SAP Cloud Platform Services.
This blog guides you through your first steps on SAP Cloud Platform:
- Check your first mail: IT Contact for your SAP Cloud Platform tenant
- Check your second mail: Logon information for your SAP Cloud Platform tenant
- Your initial login to your Global Account
- Assigning administrators
- Creating sub-accounts
- Checking your entitlements and assigning quotas
You may also follow this blog in a step-by-step guide on SAP Discover Center: Getting Started with SAP Cloud Platform
1. Check your first mail: The “IT Contact” for your SAP Cloud Platform global account
Beforehand you received an email from SAP (from firstname.lastname@example.org) to check the IT contact of your company. The IT contact is the first Administrator, who needs to initially logon to SAP Cloud Platform Global Account. Only the IT Contact SAP S-User will have the initial entitlement on the SAP Cloud Platform.
2. Check your second mail: Logon information for your SAP Cloud Platform global account
You received an additional email from the platform services team shortly before the contract start date. Look for these emails for the confirmation of account setup and access.
It contains an S-user, which can also be used for SAP Store, SAP Support, SAP.com.
The S-user of the Global Account Administrator is attached to your licensed SAP Cloud Platform Global Account and your entitlements from your consumption or subscription license. So it is essential, that you login with the correct Global Account Administrator first.
You may check your assigned SAP S-Users (you might have more than one) independent from SAP Cloud Platform with SAP ID Service.
Your initial login to your Global Account
Use the link in your Welcome e-mail or follow this link.
It is important, that you login with S-User provided in the Welcome email. Only this S-User is your company’s initial global account administrator and has the entitlements of your order to use the SAP Cloud Platform services.
Result: You get forwarded to the SAP Cloud Platform Cockpit.
The SAP Cloud Platform Cockpit is a web-based administration interface for the SAP Cloud Platform.
You see a list of your SAP Cloud Platform global accounts, the available regions, and services. For services available in different regions, see also services in SAP Discovery Center (to access the regions map view, choose Show Filters and the (globe) icon)
Assigning additional global account administrators
As Global Account Administrator you can add additional users as global account members using the SAP Cloud Platform cockpit.
SAP recommends that you create at least one additional Global Account Administrator who can support or substitute the initial Global Account Administrator if necessary. All global account members have global account administrator permissions for the global account. Adding members to global accounts is only possible in enterprise accounts, not in trial accounts. SAP cannot assign additional user IDs on your company’s behalf.
- Choose the global account to which you’d like to add members.
- In the navigation area, choose Members.
- Choose Add Members.
- Enter one or more e-mail addresses, separated by commas, spaces, semicolons, or line breaks. The users you add as members at the global account level are automatically assigned the Administrator role.
For more information, see SAP Help – Add Members to Your Global Account
SAP Cloud Platform Cockpit – global account view, members (2020)
Members of the global account can change the name of the global account. Select the global account for which you’d like to change the display name and select the “Edit”-pencil on its tile.
Check your Entitlements and Quotas
When you purchase an enterprise account, you are entitled to use a specific set of resources, as the amount of memory that can be allocated to your applications.
An entitlement equals your right to consume a resource. A quota represents the numeric quantity that defines the maximum allowed consumption of that resource.
Entitlements and quotas are managed at the global account level, distributed to subaccounts, and consumed by the subaccounts. When the quota is freed at the subaccount level, it becomes available again at the global account level.
For the recommended Multi-Environment (Cloud Foundry, ABAP, Kyma) subaccount, at least the service Application Runtime for the Cloud Foundry runtime is required. In order to run this service, the entitlement Application runtime is required. The quota you can consume and distribute to your subaccounts is your amount of memory.
If you want to use Kyma, you need in addition the Kyma runtime entitlement. Same for ABAP environment.
Check if at least application runtime is available if you want to use Multi-Environment Cloud Foundry. For more information, see Managing Entitlements and Quotas Using the Cockpit in SAP Help Portal.
For a Neo Environment, at least the service SAP Cloud Platform Java Server is required. The required entitlement, in order to run the service, is named Java Quota, the Quota is measured as premium, or pro units, which represent basically the amount of memory and CPUs available.
For more information on available services see SAP Discover Center, Services.
Create sub-accounts for your global account
Within your region-independent global account, you can create any number of subaccounts in any environment and region, depending on your contract.
For example, if you’re located in the US, you can create subaccounts in different regions, such as Europe (Rot) or Japan (Tokyo), to support the customers who are using your applications. Subaccounts are independent of each other, which means that each subaccount allows for dedicated quota and member management. You can configure a dedicated identity provider for business users in each subaccount.
Each subaccount is associated with exactly one environment, Multi-environment or Neo, for example.
Decisions for subaccounts:
- Environments: Multi-environment (recommended) or NEO environment or both.
- Regions: Choose the region of your choice
A typical setup for the SAP landscapes is the Staged Development Environment with DEV, TEST, and PROD landscape.
For Cloud Foundry, create one subaccount and 3 cloud foundry spaces for dev, test, and prod. In the NEO environment use 3 subaccounts for dev, test, and prod, typically in one Global Account. For more information, see SAP Help – Setting Up Your Account Model
Create a Cloud Foundry Subaccount with a Booster
The next steps are to create a subaccount, assign entitlements, and add users.
You can perform this step manually or with the help of a small “Booster”. Boosters are a set of guided interactive steps that enable you to select, configure, and consume services on SAP Cloud Platform to achieve a specific technical goal.
From the boosters overview page, you can get quick information about the available boosters, see booster details by accessing a booster tile and start boosters.
You can create a common multi-environment subaccount with Cloud Foundry Runtime with the booster “Prepare an Account for Development”, which you can find in the global account view in the SAP Cloud Platform cockpit.
Create a Cloud Foundry Subaccount Manually
- From your global account, choose New Subaccount.
- Specify a display name.
- (Optional) Specify a description.
- Select the region, environment, and infrastructure provider of the new subaccount according to your account plan.
Additional fields appear according to the selected environment. Select settings as required. Note: In a subaccount in the Cloud Foundry environment, the subdomain that you specify can be any string. The subdomain can contain only lowercase letters and digits, hyphens (not allowed in the beginning or at the end) and must be unique within the Cloud Foundry environment of SAP Cloud Platform.
- (Optional) To use beta features in the subaccount, select Enable beta features.
- Save your changes.
As a result, a new tile appears on the Global Account page with the subaccount details.
For more information see SAP Help – Create Subaccounts In Your Global Account.
Create Organisations and Spaces
Organizations and Spaces are only available in Cloud Foundry sub-accounts.
For each Cloud Foundry subaccount you need to create an organization (1:1 relationship):
- Select the button “Enable Cloud Foundry“.
- Provide a name for the organization.
Once you have an organization, you can create a space:
- In the Cloud Platform cockpit navigation menu, choose Spaces.
- Press button “New Space”
- Provide a name. A typical setup is a dev, test, and prod.
For more information, see Create Spaces on help.sap.com
Configure Entitlements and Quotas for Subaccounts
Assign entitlements to subaccounts by adding service plans and distribute the quotas available in your global account to your subaccounts using the SAP Cloud Platform cockpit “Entitlements”, “Service Assignments”.
Add Members to subaccounts
In the Neo environment, you manage members in subaccounts. In the Cloud Foundry environment, you manage members at subaccount, org, and space levels.
Roles determine which functions in the cockpit users can view and access, and which actions they can initiate. SAP Cloud Platform offers the predefined roles: Administrators and users and a set of predefined roles for connectivity.
SAP ID Service
The default SAP Cloud Platform identity provider and application identity provider of SAP Cloud Platform is SAP ID service. Trust to SAP ID service in your subaccount is pre-configured in both the Neo and the Cloud Foundry environment of SAP Cloud Platform by default, so you can start using it without further configuration. For more information, see the SAP ID Service.
Get Started with Services
In SAP Cloud Platform external dependencies, such as databases, messaging systems, files systems, and so on, are services. So it is essential to become familiar with services in SAP Cloud Platform, how to discover, create, configure, and consume services.
You can discover and browse available services for SAP Cloud Platform, in the SAP Cloud Platform Discovery Center service catalog (link also available from your global account in “Services”).
You can also filter the results by license model, provider, and region.
In general SAP Cloud Platform distinguishes between technical services, such as Cloud Foundry Runtime, ABAP Environment, or HTML5 Application Repository, and business services, such as Tax Service or Customer Order Sourcing. Select your category in the Navigation Pane.
SAP Discovery Center Service Catalog
For a comparison between the services for Neo and Cloud Foundry environment, I recommend the SAP blog Service mapping of SAP Cloud Platform Neo and Cloud Foundry Environments.
If your global account is configured for SAP Cloud Platform Enterprise Agreement or SAP Pay-As-You-Go you can see these services also in your “Service Marketplace in your subaccount.
If your global account is configured for subscription-based licensing, you can only see a set of initial services plus the services you are subscribed to, such as Cloud Foundry Runtime (technically application runtime) as a minimum for a Cloud Foundry environment.
Service Marketplace in SAP Cloud Platform Cockpit
In the navigation bar of the SAP Cloud Platform cockpit, select Services→Service Marketplace.
All services your subaccount is entitled to consume are shown as tiles. You can view details about a specific service by selecting one of the tiles.
The details include a short description of the service, links to the available documentation and support, the plans associated with the service, its technical name, and the environments for which the service is available.
Creating Service Instances
From the Service Marketplace, you can create a service instance for an entitled service by clicking the service tile, and “Create Instance” for a service.
A service instance uses a specific service plan. Typically different service plans allow different resource consumption.
For more information about how to create a service instance, see Creating Service Instances.
To integrate services with your applications, the service credentials must be delivered to the application. You can use bindings to generate credentials to communicate directly with a service instance.
You are done with your initial configuration of SAP Cloud Platform.
You can now continue your journey with your extension or integration use cases or set-up additional environments.