System Landscape 

Background

You can access one or more SAP systems from the Enterprise Portal. Administration of these accesses is handled by defining roles in the portal that contain External Services that are executed on the different SAP systems.

Example

The following example shows how roles and user data are assigned to the Enterprise Portal and two connected SAP system landscapes.

In this case the SAP system landscapes consist of a development system (DEV-A, DEV-B) and a production system (PRD-A, PRD-B) each. Production system PRD-A performs the functions of a central user administration with global role assignment.

The following graphic shows the system landscape and functions that the individual systems perform for role and user administration.

The portal defines roles with services in system landscapes A and B. The corresponding authorization roles are created and tested in development systems DEV-A and DEV-B and transported to the relevant subsequent production systems with the role transport.

The data for user assignment is copied from the portal to the relevant systems (see Adjusting System Responsibilities) (DEV-A, PRD-A and DEV-B). System PRD-B is not responsible for user assignment. It is linked to the central user administration of system PRD-A. Central system PRD-A therefore also receives user data for system PRD-B as well as for itself.

The system landscape described above is a complex example. A landscape consisting of a single system is also possible.