ALM_Summit_EMEA_2025_Exploring_access_management_&_landscape_separation_in_SAP_Cloud_ALM.pdf

1、1SAP ALM SUMMIT 2025BOOST YOUR ALM VALUE!Exploring Access Management and Landscape Separation in SAP Cloud ALMNico Schilling,SAPOctober,20252Agenda1Introduction2Importing the Customer Landscape3Defining Customer Units4Setting up Access Control 3Introduction4Access Control in SAP Cloud ALMBusinessNee

2、dVisionWhatCustomers have complex organizational structures with subsidiaries,different teams,tasks,and responsibilities,and hence need access to different systems managed by the same SAP Cloud ALM.With only BTP role collections,it is not possible to control access to landscape objects inside an app

3、lication.Hence,we need a solution to control this.Access Control is an attribute-based authorization concept that allows the customer to create rules defining which users can access which services and systems in the use cases.Customer Unit is a concept that allows customers to group their systems ac

4、cording to their organizational structure and add access control on top of it Establish customer units as a central separation mechanism that allows customers to assign systems,business services,users,projects,etc.,based on their organization,and create the necessary Access Control setup automatical

5、ly5 IDES AG is a company with two subsidiaries:IDES Europe GmbH IDES Logistics Services While IDES Europe has its own SAP public cloud services subscriptions,most of IDES Logistics subscriptions run under the customer number of IDES AG All subsidiaries share a global SAP Integration Suite tenant IDE

6、S AG recently provisioned SAP Cloud ALM and plans to use the tenant for itself and all its subsidiaries IDES AGs basis team will own the SAP Cloud ALM tenant and will be responsible for its setup and maintenance The functional support teams of the subsidiaries want to use the central SAP Cloud ALM f