SAP HANA Cloud goes “multi-environment”: Part 2- getting started
The SAP HANA Cloud 2022 QRC3 release is happening. You can read about the major enhancements in Thomas Hammer’s blog post here. This post is the second of a pair that describe one of the features: “multi-environment” support. Part One tells you what SAP HANA Cloud “multi-environment” support means and sketches the benefits it brings you. This companion piece walks through how to get started. It is written for SAP BTP global account and subaccount administrators (“platform users”) so you can get your HANA Cloud database administrators and developers working with the new multi-environment HANA Cloud tools.
The multi-environment tools are provided as a new BTP service plan in SAP HANA Cloud. As a result, there are some steps that need to be taken to get access. To get started with the new tools in a particular subaccount of a particular global account, the following tasks must be completed. Each is described in detail below. If you have global account administrator and subaccount administrator rights for the subaccount of interest, you should be able to complete these tasks in about 15 minutes.
- To carry out these tasks, the new HANA Cloud Tools service must be added to your entitlements. As of this writing (September 21) this should happen over the next couple of weeks without any action on your part.
- A subaccount administrator or global account administrator must add the HANA Cloud Tools service plan to the entitlements for a given subaccount, from BTP Cockpit.
- A subaccount administrator must subscribe to the HANA Cloud Tools service plan from the Service Marketplace, from BTP Cockpit
- A subaccount administrator must assign a suitable role collection to each user who wants or needs to access the HANA Cloud Tools.
- Once these steps are completed, an individual user can access the multi-environment HANA Cloud Tools from BTP Cockpit, or bookmark the tools for direct access from their browser.
While this description walks through BTP Cockpit steps, and describes access to the HANA Cloud Tools, this process can also be carried out using the btp command-line interface (instead of BTP Cockpit), and provides access to HANA Cloud management functions through the btp CLI (instead of the graphical tools).
Add an entitlement for a subaccount, from BTP Cockpit
The SAP HANA Cloud tools are now available for your global account. The next step is to make them available at the subaccount level. For this, a user with subaccount administrator permissions needs to first set an entitlement for the subaccount, and then subscribe to the service plan.
To add an entitlement to the HANA Cloud tools for a particular subaccount:
- Go to the BTP Cockpit.
- Ensure you have the correct global account selected in the drop-down at the top of the window, and navigate to the subaccount where you wish to enable access to the multi-environment SAP HANA Cloud tools. If you are a subaccount administrator you will see a full set of menu items at left, including Entitlements and Security settings. Note that even if the subaccount does not have the Cloud Foundry environment enabled, and yet we will still be able to access HANA Cloud Tools.
- Click Entitlements at left, and click Configure Entitlements at the right side of the screen.
- Click Add Service Plan to bring up the entitlements dialog. Then search for SAP HANA Cloud in the list of entitlements, and check the tools application. In the screenshot below, the tools application is already checked.
- Click the buttons to add the service plan, and make sure you click the Save button on the main screen to save the entitlement setting.
To carry out this step, you should log out of SAP BTP (at the top left of the BTP Cockpit window) and log in again so that the new entitlements are picked up for your user.
Subscribe to the service plan, from BTP Cockpit
- In the main BTP Cockpit window, go to the Service Marketplace for your global and subaccount. Click the SAP HANA Cloud tile.
- Click Create to display the New Instance or Subscription dialog. Choose SAP HANA Cloud from the Service drop-down list, and tools from the Plan drop-down.
- Complete the wizard and save your work. The subaccount now has access to the SAP HANA Cloud tools. You should now see the tools in the list of subscriptions for your subaccount.
The subscription is now complete. The final step is to grant access to a user.
Assign a suitable role collection, from BTP Cockpit
You must be a subaccount administrator to carry out this step.
As an SAP BTP application, permissions to access the multi-environment tools are governed by role collections defined and assigned to users at the subaccount level. This is different to the Cloud Foundry tools, which were controlled by Space Developer role in a Cloud Foundry space. One benefit to the multi-environment model is that you can define custom role collections that include SAP HANA Cloud permissions as well as permissions to other BTP services. Another benefit is that role collections can be assigned to subaccount users who are authenticated using custom identity providers. A company that uses BTP and has set up trust between BTP and their corporate identity provider can therefore assign access to SAP HANA Cloud tools by adding users to groups in their own corporate identity provider. These elaborations are not covered here: instead we just use the default BTP identity provider and a pre-installed role collection.
- SAP HANA Cloud has one pre-installed role collection. You can see it if you go to the Role Collections in SAP BTP Cockpit. You do not need to take any action here, just see that the SAP HANA Cloud Administrator role collection exists.
- Go to Users in the navigation tree, and choose the user you wish to access the HANA Cloud Tools. If you are a subaccount administrator you can give yourself the appropriate permissions. Click Assign Role Collection; a dialog displays.
- In the Assign Role Collection dialog, assign the SAP HANA Cloud Administrator role to the user. Be sure to save the setting.
- If you are assigning the role to yourself, log out of SAP BTP Cockpit at the top right of the window, and log in again to collect the role collection.
Access SAP HANA Cloud Tools, from SAP BTP Cockpit
Now you have rights to use the HANA Cloud Tools, you can do so from the SAP BTP Cockpit.
- Go to your global account and subaccount, and click the Instances and Subscriptions, at left.
- Locate the SAP HANA Cloud application, choose the overflow menu (the … button), and click Go To Application to launch SAP HANA Cloud Central in a separate tab.
- You should now see the SAP HANA Cloud Central application. It looks much like the Cloud Foundry edition of SAP HANA Cloud Central, but you should see that at the top, it shows the subaccount rather than the Cloud Foundry organization and space. If you are still seeing the Cloud Foundry organization and space, you do not have the role collection assigned. Sign out of SAP HANA Cloud Central and sign in again.
You should now have access to the SAP HANA Cloud Tools in BTP.
What about existing HANA Cloud instances ? If I enable the new HANA Cloud Central application on the same subaccount, will I see the database instances I created via the cf version of HANA Cloud Central ? If yes, could I then just delete the cf space and continue managing my existing HANA Cloud instance via the new HANA Cloud Central application ?
Hi Michael -
I understand there may be work going on about moving instances from one space to another, but I have no reliable information about that.
Did You clarify how to manage CF space removal without deleting the HANA instances ?
Nice and clear explanations Tom.
Is HANA cloud 'tools' plan only available for Canary landscape? I have a live global account in feature set B and I am not able to see this plan.
Hi Kumar Gaurav, Sorry for the slow reply. It has been pushed to the live public accounts so you should have seen this in your account.
Can I ask if you are a global account admin, and if it appears in your list of entitlements? That step is needed before adding it to subaccounts.
I can see it now Tom.
Thanks for your response.
Hi Tom. Do you have a quick tip on how to start/stop such HANA instances using
cfI would do
Hello Witalij Rudnicki ,
As document in SAP help: Using the SAP BTP Command Line Interface (btp CLI) with SAP HANA Cloud#Managing instances and Start and Stop an Instance Using the CLI
all you need to do is to execute a btp CLI update command:
against your hana cloud instance with the following json body to restart a stopped hana instance:
or to stop a running hana cloud instance:
I hope that helps; kind regards; Piotr
Thank you! I just did not find an equivalent of the
cf update-service, but otherwise, I got it working.
Sure Witalij Rudnicki ; glad it worked for you;
Judging from the service manager swagger API definition the async/sync option is there.
When it comes to the service manager's service instance patch API endpoint, it is a query option (?async= true | false);
(on a side note this is how I do it and with the async set to true I will get HTTP 422 if a start/stop operation is in progress thus I prefer not to wait...).
not sure though how API query options may translate into btp CLI command line options;
I hope that helps; kind regards; Piotr
Is `HANA Cloud Tools` service available for trial accounts? I cannot see this in mine.
The multi-environment tooling edition is not available in trial at this time. It is available in free tier.
I've subscribed to the SAP Hana Cloud Tools in my directory and in the subaccount in that directory.
But it does not appear as an application in 'Instances and Subscriptions' in my subaccount.
Could that be because the subaccount is in a directory and we have enabled 'Entitllement Management' for the directory?
Found out that I still needed to subscribe to Tools in the service marketplace in the subaccount.