Setting Up Landscape Management

Objective

After completing this lesson, you will be able to set Up Landscape Management

Excursus: Handling Service Credentials

To integrate certain products or connect on-premise systems with SAP Cloud ALM, you need to create a service binding from the SAP Cloud ALM API instance.

Depending on the provisioning date of your SAP Cloud ALM tenant, different steps may be needed:

Table shows the provisioning date in the left column and the Status regarding service credentials generation in the right column

Only if your SAP Cloud ALM Tenant has been provisioned before June 12, 2023, you need to create one manually as described in SAP Help Portal: SAP Cloud ALM, Enabling SAP Cloud ALM API.

Once the service key has been created (automatically or manual), you can access it on the SAP BTP Cockpit of the SAP Cloud ALM Subaccount and, if applicable, on the SAP Cloud ALM Landscape Management App:

Screenshot shows on top the SAP BTP Cockpit with the service key. And on the bottom, the SAP Cloud ALM application Landscape Management opens the configuration ui and opens the section SAP Cloud ALM Service Key

To view the service key in the Subaccount of the SAP Cloud ALM:

  1. Open the SAP BTP cockpit.
  2. Select the global account that contains your SAP Cloud ALM entitlement, and then open the Subaccount that contains your SAP Cloud ALM subscription.
  3. Choose Services → Instances, and Subscriptions.
  4. Under Instances, find the instance that contains your service key or service binding.

From here, you could view or download the service key.

To access the service key in the SAP Cloud ALM Landscape Management, perform the following steps:

  1. Opening the configuration by choosing the gear icon.
  2. Expanding the section SAP Cloud ALM Service Key. If no service key is available, you can upload it; if a service key is available, you can view, download, or delete it. In our case, we want to verify the existing service key.
  3. If you confirm the Success Message, the Status changes to green.

Note

  • You can only upload one service key or binding for this SAP Cloud ALM tenant.
  • We recommend that you upload the service credentials to the landscape management that is used regularly to connect managed services and systems to SAP Cloud ALM, for example, for monitoring setup or transport management.
  • You can use the same service credentials for all managed services and systems to connect them for the same purpose, such as monitoring.
  • If you use a different "one-use" service key for each managed service, don't upload this key to landscape management. This functionality is intended for regularly used credentials only.
  • Don't upload service keys for API calls, such as the SAP Cloud ALM Analytics API, to landscape management.

Caution

Suppose you delete your service credentials or an SAP Cloud ALM API service instance in the BTP cockpit. In that case, the service credentials in the Landscape Management app will not be deleted automatically. Please also ensure that you delete them from Landscape Management, as they are no longer usable for authentication.

Service Key Properties

Depending on the scenario, you might need the information stored in the service key. The following screenshot shows an example and the most important fields and what they are used for:

screenshot explaining the service key properties like Api, clientid, clientsecret, url, and verfificationkey

Step: Set Up Landscape Management

Services and systems must be set up in the Landscape Management app in SAP Cloud ALM as the final step of the required setup.

Landscape management in SAP Cloud ALM helps you manage information about your services, systems, and business services. This information serves as the basis for all SAP Cloud ALM applications.

The next slide shows the Landscape Management App:

Screenshot shows how to open Landscape Management App on the SAP Cloud ALM, focused on Service & Systems showing Select a Scope and Configuration buttons.
Services
In SAP Cloud ALM, services are understood as subscribed cloud services, that is, solutions and applications that are offered on-demand from the servers of a cloud provider (SaaS).
Systems
are defined as on-premise systems, that is, solutions and applications provided by SAP but installed and run on the premises of the company or organization using them, or in a private cloud solution.
Business Service
Is a logical construct that represents a business capability or application your users rely on. It groups services and/or systems, allowing you to model and monitor business-facing capabilities (for example, Order-to-Cash or Payroll) as end-to-end services.

Hint

By enabling access control, you can restrict access to specific landscape objects (services, systems, and business services) for specific users.

The most important buttons are the Select a Scope button, which looks like a dartboard, and the Configuration button, which looks like a gear.

Connecting Services and Systems

You have full control over which data from managed services and systems is transferred to SAP Cloud ALM:  When you activate your SAP Cloud ALM tenant and register your systems and services in the Landscape Management app of SAP Cloud ALM, the collection of observability data is not started automatically. SAP Cloud ALM follows a central configuration approach; therefore, you must explicitly configure the data collection processes.

Screenshot shows Import of Subscribed SAP Services and Status of imports as well as a focus on the SAP Corporate Group (CCC) S-User section with explanations.

​Before we discuss how to connect services and systems, we want to talk about the so-called SAP Corporate Group (CCC) S-User Section.

Additional Steps for Global Ultimate Customers

If you have services assigned to a different customer number (for example, as a global ultimate customer) and want to use one SAP Cloud ALM tenant to monitor other customer numbers in the customer hierarchy, you need to enter an S-user with the authorizations to access the system data for all subsidiary customer accounts to ensure that the Landscape Management app has access to the data.

To be able to access the required system data, the S-user must be one of the following:

  • A technical S-user that was created on top of the group hierarchy (for the main or parent account). By default, these technical S-users can see all subsidiary customer numbers of the corporate group.
  • A standard S-user in the corporate group. You can manage the authorizations of standard S-users yourself and according to your requirements, which gives you more control over which customer numbers they can access.

To add the S-user, open the Landscape Management app and choose Configuration. Under Import of Subscribed SAP Services, choose + (Add S-User) and enter the credentials of the S-user.

You can verify that the username and password are correct and that the S-user has access to the customer number of the SAP Cloud ALM tenant by performing the S-User Logon Check.

The customer numbers you have access to will then be stored in the Imported Customer Numbers section. Please note that initially, the customer name may be missing in this table. If the customer is available in the cloud landscape directory, the name will be added with the next daily sync.

It's the customer's decision whether to use this functionality. Optionally, you could also provision a separate SAP Cloud ALM Tenant for each customer. Or group customer.

Caution

This cannot be changed afterwards.

Import Services

The import method of services in SAP Cloud ALM depends on the service type of your solution. We can distinguish between 3 different use cases.

Note

Find a complete list of all Supported Solutions on the SAP Help Portal, SAP Cloud ALM: Supported Solutions.

Case 1: Automatic Import

Most service types are imported into SAP Cloud ALM automatically if they are assigned to the same customer number as your SAP Cloud ALM tenant. This import is done daily by the System Landscape Information service (internal SAP name SLIS).

To display the current status in the Landscape Management app, open the Configuration, expand the section Import of Subscribed SAP Services, and click on the first icon after Status of imports.

If required, you can also initiate an import on demand by selecting Import My Subscribed SAP Services. This is usually only necessary if recommended by SAP.

Hint

Please note that the recommended method for importing your subscribed cloud services and related service information into Landscape Management is the automatic import from the System Landscape Information Service (SLIS), which is executed daily. The setup of this import is done automatically, directly after subscription to SAP Cloud ALM. If required, you can also perform an import on demand.

Case 2: Registration

Other service types (such as SAP SuccessFactors and SAP S/4HANA Cloud) are push-enabled services that register themselves in SAP Cloud ALM. These services are created automatically in the Landscape Management app as part of the communication arrangement or registration (The single steps are provided in the slide):

Shows the main steps on how to create a Communication Arrangement in the SAP S/4HANA Cloud Public Edition System.

For more information, consult the SAP Cloud ALM for Operations Expert Portal, SAP S/4HANA Cloud Public Edition, or the SAP Course ADM001, Unit Summarizing Monitoring options

Another method is registration using an ABAP report. Once a technical system has been registered, a default logical system (client) is created and displayed in the System Details. For example, using the /n/SDF/ALM_SETUP transaction for SAP S/4HANA and SAP Business Suite 7. For more details, check SAP Cloud ALM for Operations Expert Portal, Setup for SAP S/4HANA and SAP Business Suite 7.

Caution

Please ensure all prerequisites are met before using this transaction.

Hint

Always consult the SAP Cloud ALM for Operations Expert Portal – Setup Managed Components. A link is provided at the end of this lesson.

Case 3: Manual Creation (in SAP Cloud ALM)

Only some service types (for example, Unspecific Cloud Service (HTTP) or Managed Gateway for Spend&Network) must be added to the Landscape Management app manually.

Also, some system types (for example, SAP Focused Run and Cloud Connector) can't be registered but need to be set up manually.

For step-by-step guidance on the manual creation (if required), find your system in the SAP Cloud ALM for Operations Expert Portal – Setup Managed Components at the end of this lesson.

You may have already seen the video on the SAP Help Portal. If not, please take a look:

This and additional videos can be found on SAP Help Portal – Video-Guided Setup.

Additional Information

Caution

If you are unsure how the service/system should be connected to the SAP Cloud ALM, please always check if there are necessary steps to establish the connection. Please use the SAP Cloud ALM for Operations Expert Portal – Setup Managed Components, where you always find the actual list.

If  you face problems you cannot solve, please consult the Troubleshooting for Landscape Management page.