(LEGAL)

Person whose direct or indirect access to an SAP installation is made possible by a password provided by a client (SAP customer).

SAP can demand that the client names the number of external defined users and that the client arrange for signed declarations from every external defined user outlining terms of use and nondisclosure agreements. A corporate entity may disclose the access rights of individual employees and of the employees of those organizations conducting business with the corporation or with the corporate subsidiaries.