Access SAP BTP Integration Suite

Your S-user ID has access to several global accounts as the licence owner of Enterprise accounts. The Account Owners S-user ID is given this access by SAP at the licence purchase. By adding the appropriate role collections, roles, and authorizations in accordance with the desired personas of SAP BTP Integration Suite users, the account owner must establish access for administrators and developers to continue the configuration process.

Assuming you are the global account admin who have received the secured license/trial BTP account from SAP.

The URL of the SAP BTP(sap business technology platform) account looks like - SAP BTP Cockpit.

You have to login with your master global account admin.

Role Collection for Global Account in SAP BTP

When using the SAP BTP Cockpit, you will be given two essential preconfigured Role Collections. These Role Collections are specifically designed for managing the BTP global account and are associated with the account Administrator roles. Below are the Role Collections available for the Global Account Administrator:

• Global Account Administrator
• Global Account Viewer

To access these Role Collections, navigate to Security > Roles Collections in the SAP BTP Cockpit.

After you have been assigned the Global SAP BTP Account Administrator Role Collections, you should be able to see all the global accounts for which you have assigned access

Role Collection to Subaccount in SAP BTP

When managing SAP BTP subaccounts, you are given three essential preconfigured Role Collections. These Role Collections are useful for subaccount Administrators in managing SAP BTP subaccounts. They are known as the subaccount administrator's Role Collections.

To access these Role Collections in the SAP BTP Cockpit, navigate to Security > Role Collections. You can easily locate the Role Collections associated with a specific subaccount by performing a search. The following Role Collections are available:

• Subaccount Administrator
• Subaccount Service Administrator
• Subaccount Viewer

For Enterprise License users, once you have access to the global account and have assigned the Subaccount Administrator Role to yourself or the administrators, you can then create SAP BTP Integration Suite-specific subaccounts.

The following figure shows the two NEO subaccounts created inside the abusiness llc global account. This setup is mandatory and is the same for Cloud Foundry subaccounts as well.

Access SAP BTP Integration Suite

You can access SAP Integration Suite if you have SAP S-User ID/email address/Universal ID based account. Accessing the SAP Business Technology Platform (BTP) Integration Suite is possible in several ways:

1. Using SAP Integration Suite browser-based application: The SAP BTP Integration Tool, a graphical user interface (GUI) for creating and deploying integrations, can be used to access the Integration Suite. Various Integrated Development Environments (IDEs), including Eclipse and Visual Studio, used to be compatible with the Integration Tool as a standalone application or as a plug-in.
   SAP does not support Eclipse based Cloud Integration plugins anymore, Developing Integration flows using Eclipse Web-ID is strongly discouraged.
2. From the SAP BTP Cockpit: You can access the Integration Suite through the SAP BTP Cockpit if you have an account with the platform. Log into the Cockpit and search "Integration" tools to accomplish this.
3. Using SAP BTP API: Using the SAP BTP API, you can programmatically access the Integration Suite as well. Using RESTful APIs, this API enables you to monitor, automate, set up, and control interfaces between SAP and non-SAP services.

Note: Access to SAP BTP Integration Suite capabilities (Cloud Integration, Integration Advisor, Integration Assessment, etc.) can also be federated through Customers own custom identity provider (Microsoft AD/Azure, Okta, etc) for increased Enterprise level security by making use of SSO/MFA.

Establishing and monitoring trust relationships between various distributed system components is known as "trust configuration" in the SAP BTP (Business Technology Platform). To enable safe and dependable communication across these elements—which could include cloud-based applications, on-premises systems, and third-party services—trust configuration must be in place.

The Trust Configuration in SAP BTP is used to enable secure and dependable communication between various components of a distributed system. SAP BTP can guarantee that data is sent securely and that only authorised parties have access to it by creating and monitoring trust relationships. This maintains the confidentiality, integrity, and accessibility of data in the system and helps defend against cyberattacks, data breaches, and other security threats.

The following figures depicts the Trust configuration of SAP Integration Suite Capabilities.

Assign Role Collections to the User

In order to access Integration Suite, you must have the appropriate Roles, Role Collection assigned. You can organize the roles you create into collections using role collections. Users logged into the SAP ID service can be assigned the role collections you have defined.

Procedure

1. Open the SAP BTP Cockpit in your web browser and select the appropriate subaccount.
2. Choose Security ➤ Role Collections from the left window.
3. Select the Role Collection you want to add users to.
4. Select Edit from the Users section.
5. The user ID of the user you want to add to the Role Collection should be entered. If the user is present in only one of the associated identity providers, you must select the provider and enter the user’s email address.
6. Select (+) to add additional users.
7. Save the changes.

Access management for Cloud Integration applications

There are several predefined roles that you can assign to account users when managing users using the SAP BTP Cockpit, as shown in the following. These roles are connected to certain personas that are useful for integration projects based on the primary duties connected with integration projects.

Persona

Cloud Integration comes with the predefined roles listed below. All users that need access to Cloud Integration based on their job responsibilities must be assigned one or more Role/Role Collections.

Authorization groups and Role Collections for each persona are listed in following Table.

Task and Permission

The responsibilities necessary to complete the various cloud integration-related tasks are summarized in the following Table. It also lists to what extent the roles and duties relate to the key persona for cloud integration.

‍

SAP Business Technology Platform (BTP) Integration Suite Summary

In conclusion, an S-user ID, granted at license purchase, can access global accounts. The account owner assigns roles and authorizations to administrators and developers​.

The SAP BTP Cockpit offers preconfigured Role Collections for managing global and subaccounts. These roles, accessed via the Cockpit, can be assigned to administrators for managing accounts and subaccounts​.

Accessing SAP BTP Integration Suite can be achieved through the SAP Integration Suite browser-based application, the SAP BTP Cockpit, or the SAP BTP API. Trust configurations are vital to secure communication across various system components​​.

Users must be assigned Role Collections to access the Integration Suite. This involves selecting the appropriate subaccount and Role Collection, entering the user ID, and saving changes​.

There are predefined roles that can be assigned to account users. These roles align with certain personas beneficial for integration projects based on primary responsibilities​​.

‍

Related articles:
- Impact of SAP Integration Suite in Modern Business

- How to Become SAP Partner?

- SAP DevOps: Empowering Modern Business with Abusiness Tech

- SAP Business Technology Platform (BTP): The Unified Solution for Business Applications