Creating Users and Spaces and Preparing Connectivity

Users with an administrator role are responsible for managing users and roles for the SAP Datasphere tenant, preparing connectivity for data integration, and creating spaces and allocating storage to them, as well as monitoring and maintaining the tenant.

This topic contains the following sections:

Configure Your SAP Datasphere Tenant

Either SAP will provision your tenant or you can create an instance in SAP BTP (see Creating and Configuring Your SAP Datasphere Tenant).

Create Users and Assign Roles

An administrator creates SAP Datasphere users manually, from a *.csv file, or via an identity provider (see Managing SAP Datasphere Users).

You must assign one or more roles to each of your users via scoped roles and global roles (see Managing Roles and Privileges). You can create your own custom roles or use the following standard roles delivered with SAP Datasphere:

  • Roles providing privileges to administer the SAP Datasphere tenant:

    • System Owner - Includes all user privileges to allow unrestricted access to all areas of the application. Exactly one user must be assigned to this role.

    • DW Administrator - Can create users and spaces and has full privileges across the whole of the SAP Datasphere tenant.

    • DW Administrator - Can create users, roles and spaces and has other administration privileges across the SAP Datasphere tenant. Cannot access any of the apps (such as the Data Builder).

  • Roles providing privileges to work in SAP Datasphere spaces:

    • DW Space Administrator - Can manage all aspects of a space (except the Space Storage and Workload Management properties) and can create data access controls and use the Content Network.

    • DW Space Administrator (template) - Can manage all aspects of the spaces users are assigned to (except the Space Storage and Workload Management properties) and can create data access controls.

      • DW Scoped Space Administrator - This predefined scoped role is based on the DW Space Administrator role and inherits its privileges and permissions.

    • DW Integrator - Can integrate data via connections and can manage and monitor data integration in spaces of which they are a member.

    • DW Integrator (template) - Can integrate data via connections and can manage and monitor data integration in a space.

      • DW Scoped Integrator - This predefined scoped role is based on the DW Integrator role and inherits its privileges and permissions.

    • DW Modeler - Can create and edit objects in the Data Builder and Business Builder and view data in all objects in spaces of which they are a member.

    • DW Modeler (template) - Can create and edit objects in the Data Builder and Business Builder and view data in objects.

      • DW Scoped Modeler - This predefined scoped role is based on the DW Modeler role and inherits its privileges and permissions.

    • DW Viewer - Can view objects in spaces of which they are a member and view data output by views that are exposed for consumption in these spaces.

    • DW Viewer (template) - Can view objects and view data output by views that are exposed for consumption in spaces.

      • DW Scoped Viewer - This predefined scoped role is based on the DW Viewer role and inherits its privileges and permissions.

  • Roles providing privileges to consume the data exposed by SAP Datasphere spaces:

    • DW Consumer - Can consume data exposed by SAP Datasphere spaces of which they are members using SAP Analytics Cloud, and other clients, tools, and apps, but cannot log into SAP Datasphere. This role is intended for business analysts and other users who use SAP Datasphere data to drive their visualizations, but who have no need to access the modeling environment.

    • DW Consumer (template) - Can consume data exposed by SAP Datasphere spaces, using SAP Analytics Cloud, and other clients, tools, and apps. Users with this role cannot log into SAP Datasphere. It is intended for business analysts and other users who use SAP Datasphere data to drive their visualizations, but who have no need to access the modeling environment.

      • DW Scoped Consumer - This predefined scoped role is based on the DW Consumer role and inherits its privileges and permissions.

  • Roles providing privileges to work in the SAP Datasphere catalog:

    • Catalog Administrator - Can set up and implement data governance using the catalog. This includes connecting the catalog to source systems for extracting metadata, building business glossaries, creating tags for classification, and publishing enriched catalog assets so all catalog users can find and use them. Must be used in combination with another role such as DW Viewer or DW Modeler for the user to have access to SAP Datasphere.

    • Catalog User - Can search and discover data and analytics content in the catalog for consumption. These users may be modelers who want to build additional content based on official, governed assets in the catalog, or viewers who just want to view these assets. Must be used in combination with another role such as DW Viewer or DW Modeler for the user to have access to SAP Datasphere.

  • Role providing privileges to use AI features in SAP Datasphere:

Create Spaces and Allocate Storage

All data acquisition, preparation, and modeling in SAP Datasphere happens inside spaces. A space is a secure area - space data cannot be accessed outside the space unless it is shared to another space or exposed for consumption.

An administrator must create one or more spaces and allocate resources to them. See Creating Spaces and Allocating Resources.

Prepare Connectivity

Administrators prepare SAP Datasphere for creating connections to source systems in spaces (see Preparing Connectivity for Connections).

Monitor and Maintain SAP Datasphere

Administrators have access to various monitoring logs and views and can, if necessary, create database analysis users to help troubleshoot issues (see Monitoring SAP Datasphere).