Skip to content

Latest commit

 

History

History
99 lines (46 loc) · 4.48 KB

add-members-to-your-subaccount-feature-set-b-1e1b7b6.md

File metadata and controls

99 lines (46 loc) · 4.48 KB
Raw

Add Members to Your Subaccount [Feature Set B]

Add members to your subaccount to enable users to access resources available there. Platform users manage subaccounts with cloud management tools, while business users consume applications and services.

Prerequisites

  • You’re managing a multi-environment subaccount.

    For more information about adding members to Neo subaccounts, seeAdd Members to Your Neo Subaccount.

  • You must be a subaccount administrator to add other subaccount members.

  • The users exist in a trusted identity provider.

    All users of SAP BTP are stored in identity providers, either in the default or in a custom identity provider. SAP BTP needs a copy of the user, sometimes called a shadow user. You assign the shadow user authorizations to access resources in SAP BTP. When a user authenticates, SAP BTP forwards the request to the identity provider.

    For more information, see Trust and Federation with Identity Providers.

Context

Note:

The content in this section is only relevant for cloud management tools feature set B. For more information, see Cloud Management Tools - Feature Set Overview.

There are two types of users in subaccounts:

  • Platform users

    These users are members of your team. Platform users manage the subaccount with the cloud management tools.

    Assign predefined or custom role collections to users who need to manage or view the subaccount in SAP BTP cockpit. Examples of predefined role collections include the following:

    • Subaccount Administrator

    • Subaccount Viewer

    For more information about the available role collections, see Role Collections and Roles in Global Accounts, Directories, and Subaccounts [Feature Set B].

    To work in the Cloud Foundry environment add users and authorizations at the org and space level.

    For more information, see About User Management in the Cloud Foundry Environment.

  • Business users

    These users consume applications and services. Business users don't access cloud management tools like the SAP BTP cockpit. Assign role collections required by the applications and services the business users consume.

Procedure

Tip:

If you're a global account administrator, you can quickly assign yourself as an administrator of a subaccount by going to the Account Explorer page and then choosing the Add Me as Admin option in the Actions () context menu of the subaccount. To assign other users, follow the instructions below.

This feature may not be available if it has been disabled for your global account.

To disable this feature, send an opt-out request using the component BC-NEO-CIS-OPS. See Getting Support for information about opening a case and getting technical assistance.

  1. Navigate to your subaccount.

  2. Add a user to your subaccount.

    For more information, see Create Users.

  3. Assign role collections to the user.

    For more information, see Assign Users to Role Collections.

Results

The user can log on to SAP BTP and access resources according to the role collections you've assigned to the user.

Related Information

User and Member Management

Navigate in the Cockpit