Access to Resources and the Login Process

Objectives
After completing this lesson, you will be able to:

After completing this lesson, you will be able to:

  • Grant access to resources and the default login process

To Perform Account Administration in the Cockpit

When accessing the SAP BTP cockpit, be aware that your global account can be using either cloud management tools feature set A or B.

When using cloud management tools feature set A choose:

https://account.eu1.hana.ondemand.com to access the cockpit

When using cloud management tools feature set B choose:

https://cockpit.eu10.hana.ondemand.com/cockpit/ to access the cockpit

Navigate to Global Accounts, Directories, and Subaccounts [Feature Set B]

You have only one global account.

Steps

  1. Navigate to a global account.

  2. When you log on to the cockpit you’re automatically taken into your global account, to the Account Explorer page.

Result

You have multiple global accounts:

When you log on to the cockpit, a dialog opens up containing the list of all global accounts of which you are a part. In this dialog, select the global account to which you want to navigate.

Subaccount Usage Analytics

You can explore, compare, and analyze all your actual usage data for the services and applications that are available in your subaccount.

To monitor and track usage in a subaccount, open the subaccount in the SAP BTP cockpit and choose Usage Analytics in the navigation area.

Views in the Subaccount 'Usage Analytics' Page

The subaccount Usage Analytics page contains views that display usage at different levels of detail:

Views in the Subaccount Usage Analytics

ViewDescription
Subaccount

Displays high-level usage information for your subaccount relating to services, business application subscriptions, and Cloud Foundry org spaces.

Some information in this view is displayed only for global account admins.

ServicesDisplays usage per service plan for the region of the subaccount, and the selected metric and period. Information is shown for all services whose metered consumption in the subaccount is greater than zero.
Spaces(Cloud Foundry environment only) Displays service plan usage per space for the services shown in the Services view.

To Delete a Subaccount

Delete subaccounts using the SAP BTP cockpit.

Prerequisites

You're a global account administrator.

The subaccount doesn't contain any active subscriptions, service instances, brokers, or platforms.

When using cloud management tools feature set A, active subscriptions, service instances, brokers, or platforms can be removed by roles that are environment-specific, for example an org manager in a Cloud Foundry environment.

When using cloud management tools feature set B, subaccount administrators can remove active subscriptions, service instances, brokers, or platforms.

Context

To prevent accidental deletion of subaccounts and creation of orphaned data, any active subscriptions, service instances, brokers, or platforms must be removed from the subaccount before it can be deleted. Only subaccount administrators can remove such content from a subaccount.

Steps

  1. Choose the subaccount that you want to delete.

  2. Choose Delete Subaccount and confirm the operation.

Further Processes

Security

Use the security features and functions of SAP BTP to support the security policies of your organization.

Note
See User and Member Management.

Authorizations

You can configure authorizations using roles and role collections for your global account, subaccount, directory, or individual applications.

Identity Providers

All users of SAP BTP are stored in identity providers, either in the default or in a custom identity provider. SAP BTP needs a copy of the user, sometimes called a shadow user. You assign the shadow user authorizations to access resources in SAP BTP. When a user authenticates, SAP BTP forwards the request to the identity provider.

Use the default identity provider as a preconfigured user store in your starter scenarios or for testing. You can also use the default identity provider as a backup identity provider if access to your custom identity provider fails.

How to Connect to the IAS Tenant

Explore the IAS Tenant

How to Build a Demo Application

Log in to track your progress & complete quizzes