SAP S/4HANA Cloud Edition

Starter System Provisioning Process

March, 2017
The Road to SAP S/4 HANA with SAP Activate

Discover Prepare Explore Realize Deploy Run

Continuous innovation with Content Lifecycle Management

Project
Lifecycle
Solution Manager Integration

Fit / GAP based

Fit2Standard Analysis Migrate, Operate,
Experience on model
Scope and
integrate,
Onboard and
monitor,
based on model configure deploy
Trial company extend, test support
SAP S/4HANA
cloud edition

Trial System*

Starter System
System
Landscape Q-System

* Provisioned and managed by SAP, limited use license. P-System

© 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 2

Onboarding self-service reference material Cloud Accelerator

SAP Best Practices Explorer SAP S/4HANA Cloud Roadmaps

https://rapid.sap.com/bp/ https://go.support.sap.com/roadmapviewer/

© 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 3

 Getting you to your starter system - Process

SAP Service Center

System Setup Users

Congratulations! Notification Activate Systems Notify & Explore
Provisioning & Roles
You have decided to An SAP S/4HANA Starter Once the systems have Follow the links and Organize for your ‘end’ Communicate access
take your company to system as well as an SAP been provisioned you will instructions in the emails users to be created in your information to your users
the SAP S/4HANA SCI (SAP Cloud Identity) receive several emails you receive to access and landscape and organize the and begin to explore SAP
Public Cloud. system will be provisioned allowing you to activate change the system roles that they will need. S/4HANA Cloud.
for you. and login to your starter generated passwords.
systems.

© 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 4

Your starter systems landscape Cloud Accelerator

Your starter system landscape is comprised of:

- An S/4HANA Cloud Enterprise Management client, with SAP

Best Practices, fully activated with data:
- e.g. myXYZ.s4hana.ondemand.com
- Note: Your system can only be accessed via a web browser

- An SAP Cloud Identity management system – user

authentication:
- e.g. aABC123.accounts.ondemand.com

Once your landscape is ready you will be notified via email

© 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 5

Activate & secure your starter system

Once your starter landscape has been provisioned, altogether

you will receive 3 emails, further details are described in the
User Onboarding Guide.

For SAP Cloud Identity (SCI)

- 1. One email to activate your SAP Cloud Identity console

For SAP S/4HANA Cloud Starter System

- 2. One email to provide you with an Administrator user
- 3. One email to provide you with the Administrator password

Note:
• Emails will be sent to the person defined as the IT Contact typically defined in the
SAP contract.
• If that person is incorrect, then contact the account team to have this changed or
log an incident under component XX-S4C-SRV and title ‘Request update to the
contact IT person’. Roadmap Link
© 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 6
Setting up users and roles | Users Cloud Accelerator

Follow the self service instructions documented in the User

Onboarding guide for user creation in the Starter System.

Go to the roadmap link and download the accelerator.

Follow the instructions:

• Initial Logon and Administration Business User Creation
• Creation of Additional Employees and Business Users

Your administrator and business user is now completely configured

and usable in your S/4HANA Cloud Starter System.

If issues arise log an incident on component XX-S4C-SRV with the user

title ‘User Creation in the Starter System’ followed by a detailed
explanation with business impact.
© 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 7
Setting up users and roles | Roles Cloud Accelerator

Your system will not contain any

business roles in your Starter
System you have to create them.

SAP Provides Template Roles with

your SAP S/4HANA Cloud system.

You can create your own roles

and/or use SAP template roles to
get you started.

For a given SAP Best Practices

scope item, the corresponding
documentation will inform you of
Templates
which SAP template roles can be
used.
© 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 8
Setting up users and roles | Roles Cloud Accelerator

The initial administrator will have the business

1. role SAP_BCR_CORE_IAM assigned to him, thus
giving him access to the Identity and Access
Management tile group.

The Maintain Catalog Roles tile, whilst available,

should not be used (ref: cloud accelerator)

2.

Create Business roles by using a SAP template role or create your own.
© 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 9
Setting up users and roles | Roles Cloud Accelerator

Refer SAP Best Practices Test Script

Use the template roles indicated in SAP Best
Practices scripts to determine which roles you need

2. Search for SAP template roles

3. 4.

Using SAP template roles

5.
You can freely name your own business roles
and descriptions.

© 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 10

Setting up users and roles | Roles Cloud Accelerator

By default, created roles are Inactive and do

not permit write authorizations.
6.
To maintain authorizations, click on Maintain
General Restrictions’

© 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 11

Setting up users and roles | Roles Cloud Accelerator

7.

Write access can be

changed to unrestricted
(ALL) or restricted.
Authorization change
management to be applied
for specific user restrictions.
© 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 12
Setting up users and roles | Roles Cloud Accelerator

8.

9.

To make a role usable, you

You can also move to the Assigned business Users
need to activate it.
tab, to assign the roles to user(s).

10. Tip: Do not forget to save your assignment and

check if the roles needs activation again.

© 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 13

Letting your users onto the system Cloud Accelerator

Once you have uploaded additional employees and business

users in SAP SCI, assigned roles to them in SAP S/4HANA
cloud, you will from SAP SCI, trigger the send of an email to
your users.

They will in turn receive an activation email, that includes a link

for them to follow and activate their user.

From then on, your users can just follow the link to you
S/4HANA cloud system  e.g. myXYZ.s4hana.ondemand.com

© 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 14

Letting your users onto the system

Important Re-setting user password

When ever your users access the SAP S/4HANA A user can reset his own password if he forgets it.
Cloud system URL, they will be presented with a After selecting ‘Cancel’ in the pop up shown to the
window from which they can select a certificate. left, the user will be presented with a logon
window, from which he can follow the ‘forgot
The action MUST be to select ‘Cancel’, otherwise password’ link.
authentication will fail.

© 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 15

Lessons Learned

© 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 16

Appendix

© 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 17