SAP Analytics Cloud

Technical and Administration Overview

Matthew Shaw, SAP Version 1.1
May 2020

PUBLIC
Agenda
 Architecture
 Authentication
 Authorisations
 Data Security
– Acquired Data Models
– Live Connections
 On-premise Components
– Acquired Data: Cloud Connector and Cloud Agent
– Live Connectivity including advanced options
– R-Server
 On-premise Dependencies & Keeping up-to-date
 Transporting
 Monitoring and Usage Tracking
 Other System Administration Tasks & Tips

© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 2

SAP Analytics Cloud Architecture

Hub & Catalog Mobile

Centralized Portal iOS & Android

User Digital Boardroom Stories Analytic Applications MS Office Integration

Experience Executive Analytics Dashboards & Reports Scripting & Extensions Office 365

Business Intelligence Augmented Analytics Enterprise Planning

Analytic Data Discovery & Exploration Conversational Analytics Events and Workflows
Capabilities Storytelling & Visualizations Automated Analytics Allocations
Enterprise Reporting Predictive Analytics Sharing & Simulation

Data Data Life-cycle

Platform connectivity preparation
Modelling Administration
Management
Collaboration Scheduling APIs

PaaS SAP Cloud Platform

Amazon Web Services SAP Data Center

3rd party Data Sources and

Cloud Data Sources
Applications
and Applications
© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 3
Agenda
 Architecture
 Authentication
 Authorisations
 Data Security
– Acquired Data Models
– Live Connections
 On-premise Components
– Acquired Data: Cloud Connector and Cloud Agent
– Live Connectivity including advanced options
– R-Server
 On-premise Dependencies & Keeping up-to-date
 Transporting
 Monitoring and Usage Tracking
 Other System Administration Tasks & Tips

© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 4

Authentication
User management (1/2)

SAML2
Identity Provider (IdP)

 SAP provides a default Identity Provider Trust relationship

SAP Analytics
 This default provides: Cloud
– Manual User Creation through ‘Menu-Users’
– Manual User Import from a CSV File
– Can also use a SCIM API

 Typically more suitable to integrate with your existing custom IdP:

– Must be SAML2 based
– Commonly used IdP’s: Okta, ADFS, Microsoft Azure
– Grant users access to the ‘SAP Analytics Cloud’ application within the IdP

© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 5

 Authentication SAML2
Identity Provider (IdP)
User management (2/2) Trust relationship
SAP Analytics
Cloud
Recommendations
 Enable ‘dynamic user creation’ during the custom IdP setup
– Enables automatic assignment of new users to a ‘concurrent session’ license
o Much more in the blog
– Map IdP user attributes to ‘Teams’ in SAP Analytics Cloud

 SAP Analytics Cloud is case-sensitive during the user mapping process. This means
– If the IdP changes the case (typically the email) then the user won’t match with the user in SAP Analytics
Cloud
– Need to work with SAP to resolve user mismatches until a full solution is available
 One lesson learnt is to change the case of all emails, in custom IdP, prior to integration
– [email protected] becomes [email protected]

 Fully self-service
– Bookmark the ‘Identity Provider Administration’ tool to rescue yourself if you get locked out!
 More resources
– Documentation
– https://www.sapanalytics.cloud/guided_playlists/user-management-identity-provider-idp/
 See demo!
© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 6
Agenda
 Architecture
 Authentication
 Authorisations
 Data Security
– Acquired Data Models
– Live Connections
 On-premise Components
– Acquired Data: Cloud Connector and Cloud Agent
– Live Connectivity including advanced options
– R-Server
 On-premise Dependencies & Keeping up-to-date
 Transporting
 Monitoring and Usage Tracking
 Other System Administration Tasks & Tips

© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 7

 Authorisations
Roles, Teams, User concepts
Roles define
 Authorisations are performed within SAP Analytics Cloud Application
Rights

 Key concepts inside SAP Analytics Cloud: Role Role Role

– Roles
– Teams
– Users

 Best Practice Summary: Assign rights

– Use inheritance on objects:
o Avoid assigning rights on individual files or individuals Team Team Folder
o Assign rights to Teams and Folders Teams group Roles and
Teams assign rights to folders
o Assign Teams to Roles
o Assign Users to those Teams and not directly to Roles
– though there is an exception for ‘concurrent session’ license assignment

o For more details on “Managing Licenses with Roles and Teams”: User User
blog and wiki
© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 8
Authorisations
Best Practices setup
Read Create
Project A
Project A Project A Project A Ad-Hoc
Public \ Project A Ad-Hoc Standard Secure Project A Ad-hoc
Read
(deny others)

Project B Secure

Project A
Project C Secure
Standard

 Organise Public Folders so to take advantage of inheritance rights

Models  A folder per Project (or Line of Business)
 More information:
SAP Analytics Cloud - Security Concepts and Best Practice

© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 9

Agenda
 Architecture
 Authentication
 Authorisations
 Data Security
– Acquired Data Models
– Live Connections
 On-premise Components
– Acquired Data: Cloud Connector and Cloud Agent
– Live Connectivity including advanced options
– R-Server
 On-premise Dependencies & Keeping up-to-date
 Transporting
 Monitoring and Usage Tracking
 Other System Administration Tasks & Tips

© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 10

Data Security
Acquired data models

© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 11

Data Security
Acquired data models
Row level data security
 Two ways to define Data access in a model

 Option 2: Data Access Filter in Role

– Assign access right filters in the role
– Can use ‘Current User’ and ideal for Organisation Dimensions
when using Planning
– Typically assign users to a team, where the team is a member of
the role
 Option 1: Read/Write Property in Model Dimension
– Assign, for a dimension value who can access it – Model Data Privacy must switched on
– Can use Team membership – Tip! Easy way to enable/disable access to a model
– Works with hierarchies without changing other file permissions!

– Data Access control for Dimension must switched on  See demo!

© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 12
Agenda
 Architecture
 Authentication
 Authorisations
 Data Security
– Acquired Data Models
– Live Connections
 On-premise Components
– Acquired Data: Cloud Connector and Cloud Agent
– Live Connectivity including advanced options
– R-Server
 On-premise Dependencies & Keeping up-to-date
 Transporting
 Monitoring and Usage Tracking
 Other System Administration Tasks & Tips

© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 13

Data Security
Live Connections

https://www.sapanalytics.cloud/learning/data-connections/
© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC SAP Analytics Cloud - Live Connection and Security - Best Practices 14
Data Security
Live Connections
SAP Analytics
Cloud
Public Cloud

Organisation Network

SAML Live

Identity Provider Data Source

SAP BW, S/4, HANA, Universe etc.
 Live connections is a true direct connection between the browser and the data source
 Data is not sent or stored in SAP Analytics Cloud
 Enabled with the use of Cross-Origin Resource Sharing (CORS) and is fully encrypted and secured

© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 15

Data Security
Live Connections

SAP Analytics Metadata Data

Cloud Queries Queries

Data Source
͞ID͕͟͞ Name͕͟͞ Salary͟
Public Cloud

Organisation Network 1, Alice, $80,000

2, Bob, $70,000

 SAP Analytics Cloud stores just the meta-data:

– Connection name, description, server/port (no usernames or passwords are stored)
– Model meta data: field definitions, data type (measure, dimension, decimals, aggregation type etc.)
– Story definitions (layout, labels, styling, filter values, formulas etc.)
© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 16
Data Security SAML2
Identity Provider (IdP)
Live Connections
SAML2 SAML2
Trust relationship Trust relationship

Single-Sign-On to ‘live’ data sources means SAP Analytics

Database
Cloud
 Data source applies all data security
 Data security is completely externalised
 No need to replicate data security within SAP Analytics Cloud SAML token SAML token
 Only need to manage ‘application’ rights
– What the user can/can’t do (create/edit stories) – via ‘Roles’
– What the user has rights over content – via ‘File permissions’
SAML token

 SSO typically performed via SAML2, but can be others:

– X509 certificate, Kerberos or SAP Logon tokens are also possible if the
database supports it
– OAuth also supported for Cloud sources

© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 17

Agenda
 Architecture
 Authentication
 Authorisations
 Data Security
– Acquired Data Models
– Live Connections
 On-premise Components
– Acquired Data: Cloud Connector and Cloud Agent
– Live Connectivity including advanced options
– R-Server
 On-premise Dependencies & Keeping up-to-date
 Transporting
 Monitoring and Usage Tracking
 Other System Administration Tasks & Tips

© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 18

Cloud Connector
On-premise components
& Cloud Agent
Cloud Connector and Cloud Agent
 On-premise
– Cloud connector
– Cloud agent
– R-Server (is using own R-server keep it local to the SAC data centre)
– Web server to host font file
– SDI – smart data integration
– Data source dependencies (BW notes, LUC etc)

© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 19

 On-premise components SAP Analytics SAP Analytics
Cloud Connector and Cloud Agent Cloud Cloud
 Architecture
– Each SAP Analytics Cloud Service can use multiple SAP Cloud
Connectors
– One SAP Cloud Connector can use only one Agent

 Cloud Connector
– Cloud Connector Documentation link SAP Cloud SAP Cloud
– Includes details on sizing and setting up a ‘Master’ and Connector Connector
‘Shadow’ to enable High Availability
– Each Connector must be given a unique location name
(to enable a ‘default’ location leave the location name blank)

 Configuration
– Recommended to use same server for both Connector and Agent Agent
Agent  Tips
– Connector, Agent and Data source need to connect to each – When configuring the SAP Cloud Connector ‘subaccount’, it will be a different
other account from any previous SAP Cloud Platform subaccount you’ve used before
– Typically takes a few hours but can be just 15 minutes with the – How to add members to existing subaccount KBA 2463966
‘SAP Analytics Cloud Agent Simple Deployment Kit’ – How to connect multiple Cloud Connectors to one subaccount KBA 2712296
– https://www.sapanalytics.cloud/resources-deployment-kit/ – Don’t delete any ‘SAP’ users in the subaccount – they are for SAP ‘DevOps’
and critical to its function. They have no access to data
© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 20
Agenda
 Architecture
 Authentication
 Authorisations
 Data Security
– Acquired Data Models
– Live Connections
 On-premise Components
– Acquired Data: Cloud Connector and Cloud Agent
– Live Connectivity including advanced options
– R-Server
 On-premise Dependencies & Keeping up-to-date
 Transporting
 Monitoring and Usage Tracking
 Other System Administration Tasks & Tips

© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 21

On-premise components SAP Analytics
Live connectivity Cloud
Mobile App
Setup Overview
 No need for any special on-premise components SAP Analytics
Cloud
 Configuration of on-premise data sources:
– Setup SSO, typically SAML Browser
On-premise
– Enable CORS (trust relationship, SSL certificate)
data sources On-premise Cloud
– Setup Same Site Cookie configuration
 Client browsers:
– Allow 3rd party cookies, pop-up windows
Person Areas of Expertise
SAP Analytics Cloud SAP Analytics Cloud settings, such as SAML 2.0 settings, users and roles
system owner management, and connection settings.
Data source expert Connectivity layer and security
(SAP HANA, SAP BW or SAP BW/HANA, SAP S4/HANA, and so on).
Network expert Proxy, firewall, DNS server etc.
Security expert SAML 2.0, your organization's Identity Provider (IdP), SSL certificates, etc.
Information system architect General architecture topics.
Application expert SAP or non-SAP, depending on your data sources:
connectivity, security, modelling etc.
© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 22
On-premise components
Live connectivity – advanced features (1/4)
SAP Analytics
Cloud
Mobile App
Live Connections requiring additional components:
SAP Analytics
 Using the iOS Mobile App Cloud
– Enabled via an optional connection setting
Browser
 Scheduling/Publishing based off Live data source
SAP Analytics
Cloud

SAP Cloud Connector iOS Mobile App

 System owner needs to change settings SAP Analytics

– ‘Allow live data to securely leave my network’ Cloud
– Add additional properties to existing live connections SAP Cloud Connector Scheduling / Publishing
On-premise:
 Setup the SAP Cloud Connector for ‘Principal Propagation’
BW, HANA, S/4
and trust relationship
On-premise Cloud

 See demo!

© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 23

On-premise components
Live connectivity – advanced features (2/4) SAP Analytics
Cloud

SAP Analytics SAP Data

Cloud Provisioning
Agent

SAP HANA,
BW4HANA, BW
on HANA

Data Blending within Stories

 Blending of data is possible with  Browser-based  Smart Data Integration (SDI):
other ‘live’ models and acquired – Blending occurs in the Cloud, not in – Suitable for larger data volumes
models the browser!
– Requires setup of Provisioning Agent
 See next slide for matrix of – Data is transmitted via the browser
– Switch to SDI-based if possible and
possibilities! and so has performance and size
needed later
 Depending upon the level of limits
support either browser-based or – No configuration needed!
SDI-based blending is possible
© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 24
On-premise components
Live connectivity – advanced features (3/4)

Blending
 Support Matrix wiki
 Additional Resources

© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 25

On-premise components
Live connectivity – advanced features (4/4)

SAP Analytics
Live SAP HANA Data Access for Smart Predict
Cloud
 Train and apply a predictive model using business data that stays in
your on-premise SAP HANA system
 Configuration steps:
SAP Cloud
– Install the HANA Automated Predicted Libraries (APL)
– Configure HANA Technical User
Connector
– Configure SAP Cloud Connector
– Add and Configure the Data Repository in SAP Analytics Cloud SAP HANA,
BW4HANA, BW
 See demo!
on HANA
 Smart Predict Documentation

© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 26

Agenda
 Architecture
 Authentication
 Authorisations
 Data Security
– Acquired Data Models
– Live Connections
 On-premise Components
– Acquired Data: Cloud Connector and Cloud Agent
– Live Connectivity including advanced options
– R-Server
 On-premise Dependencies & Keeping up-to-date
 Transporting
 Monitoring and Usage Tracking
 Other System Administration Tasks & Tips

© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 27

 On-premise components
R-Server: Two options
Hosted R- server

 For both: All data within the

SAP Analytics visualisation, including data from a ‘live’
SAP Analytics Cloud connection will leave your on-premise
Cloud Cloud and travel to the Cloud
On-premise
 For data from ‘live’ connections must
enable this feature in the administration
settings ‘R on Live Data Models’

R-server
 See demo!
 Use the SAP hosted ‘R-server’  Use your own R-Server
– Available in most Data Centres – Install and configure
– Default set of R-packages – Can use any R-package
provided – The only time SAP Analytics Cloud will make an outbound call!
– R-Packages available – SAP Cloud Connector is not used
– Place your R-Server ‘close’ to the SAP Data Centre
© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 28
Agenda
 Architecture
 Authentication
 Authorisations
 Data Security
– Acquired Data Models
– Live Connections
 On-premise Components
– Acquired Data: Cloud Connector and Cloud Agent
– Live Connectivity including advanced options
– R-Server
 On-premise Dependencies & Keeping up-to-date
 Transporting
 Monitoring and Usage Tracking
 Other System Administration Tasks & Tips

© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 29

On-premise dependencies
Advanced notice
2020
J F M A M J J A S O N D

Quarterly Just
Release Cycle Wave 2020.02 Wave 2020.08 Wave 2020.14 Wave .21 released

Up to 4 months notice
Up to 4 months notice
Up to 4 months notice
2020.03
2020.04

2020.07
2020.08
2020.09
2020.10

2020.12
2020.13
2020.14
2020.15
2020.16

2020.19

2020.23
2020.24
2020.25
2020.02

2020.05
2020.06

2020.11

2020.17
2020.18

2020.20
2020.21
2020.22
Fast Track
Release Cycle

Notice of what’s coming

 A ‘Fast Track’ release cycle, consumed by only a small number of customers, enables:
– early notification of any on-premise dependencies
– ample time to plan
 On-premise ‘true-dependents’ are rare, but they do occur
 Do need to follow certain SAP Notes to ensure consistent service is provided
https://www.sapanalytics.cloud/product_updates/
© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 30
On-premise dependencies
Keeping up-to-date

Primary on-premise components

 SAP Cloud Connector
– Very rare for any update to be required
– To check for these rare changes:
▫ Open the documentation from the ‘What’s new’ wave update
▫ View the ‘System Requirements and Technical Prerequisites

 SAP Cloud Agent

– Email notification ahead of time should the agent require an update Add distribution list for notifications
– You can add an email address for system notifications

 For all on-premise components

– ‘Older’ SAP Analytics Cloud wave versions always work with newer on-premise components
– Recommended to always update the on-premise components
▫ Generally stability and performance improvements

 How to add more Recipients to System Event Notification Emails

© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 31
On-premise dependencies
Keeping up-to-date

Other notification settings

 Within each users’ Profile Setting enable:
– ‘System Notifications’
– ‘Product Updates & Learning’

© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 32

On-premise dependencies
Keeping up-to-date – data source requirements
For Live connectivity to: BW, HANA and S/4:
 Minimum requirements do change for these source systems
 They don’t change just because SAP updated SAP Analytics Cloud
– Only additional features brought into SAP Analytics Cloud would require updates to on-premise systems
– All existing features/functions will work as before
– Typically new features will only be enabled to the user if the backend system was updated
– Follow SAP Notes 2715030 2541557
 However, minimum requirements are raised as per SAP Support Strategy and are typically related to defect corrections only
– In order to stay supported, on-premise systems are expected to be updated
– Follow SAP Note 375631

For Live connectivity to: SAP BusinessObjects Universe:

 The on-premise connector may require an update upon an SAP Analytics Cloud update
 Occasionally changes to the BI Platform are required
 Follow SAP Note 2771921

Once a currently supported on-premise version reaches its end of maintenance, then minimum requirements will be increased
Minimum requirements are subject to change
© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 33
Agenda
 Architecture
 Authentication
 Authorisations
 Data Security
– Acquired Data Models
– Live Connections
 On-premise Components
– Acquired Data: Cloud Connector and Cloud Agent
– Live Connectivity including advanced options
– R-Server
 On-premise Dependencies & Keeping up-to-date
 Transporting
 Monitoring and Usage Tracking
 Other System Administration Tasks & Tips

© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 34

Transporting Content
Content Network

Sandbox Dev QA Prod

Content
Network
Content Network
 Shared folder in the Cloud
– Hosts ‘Unit’ or ‘Package’ files
– Secured sharing

 Promote content, not security

– In general, users in source and target are different set of
users
– Content transport will respect target folder security
© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 35
Transporting Content
Content Network demo

Dev Prod

Project A

Content Network Demonstration: Transport a public folder ‘Project A’ to another SAP Analytics Cloud Service
 Create a new package and save it into a new folder
 Export the package
 Share the folder with the target
 In the target, import the package
© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 36
Transporting Content
Best Practices (1)

 Create a folder, in the Content Network, for each Source System and each
Project
Source: Dev: Project A
 Store Packages for each project in their respective folder
 Set sharing and security settings on the folder, to take advantage of inheritance
Source: Prod: Project A

 Only transport model data if really needed

 Keep the packages small, rather than monolithic!
– Makes managing the content much easier

 Properties of the Package can contain a lot of text. Include:

– Date of export
– SAP Analytics Cloud wave version at time of export
– ‘Status’ of package. E.g. ‘Waiting for test’, ‘Approved for import’ etc.
▫ This can be changed and updated over time
▫ ‘Edit’ right on the Content Network folder enables the users in the target to edit the
package properties

© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 37

Transporting Content
Best Practices (2)

 Re-use existing packages to ‘re-capture’ change content rather than create a new package each time
 Turn on ‘Modify content’ to re-capture the source

 Remember: Respect the ID of objects and create content once, then transport it to other environments

© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 38

Agenda
 Architecture
 Authentication
 Authorisations
 Data Security
– Acquired Data Models
– Live Connections
 On-premise Components
– Acquired Data: Cloud Connector and Cloud Agent
– Live Connectivity including advanced options
– R-Server
 On-premise Dependencies & Keeping up-to-date
 Transporting
 Monitoring and Usage Tracking
 Other System Administration Tasks & Tips

© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 39

Monitoring & Usage Tracking
Resource Usage Tracking, System Monitor, Activity Log, Data Changes Log
 Resource Usage Tracking
– Standard content providing usage information:
o Stories, models, user and sessions
– Keep the content in a secured public folder
o personal folders can cause issues when you wish to update the content
o Provides data across the whole service exposing usernames, model names
etc
– https://www.sapanalytics.cloud/resources-usage-tracking/

 System Monitor
– License consumption
– Historical Usage
– System Usage by Storage and by User  Data Changes Log
– Trace – Shows actual measure data changes when a private planning versions
is published to a public version
– Notified as approaching max 500,000 rows
 Activity Log
– Audit log of events
 Remember, these logs contain personal data
– Filter and download as needed
– Notified as approaching max 500,000 rows
 See demo!
© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 40
Agenda
 Architecture
 Authentication
 Authorisations
 Data Security
– Acquired Data Models
– Live Connections
 On-premise Components
– Acquired Data: Cloud Connector and Cloud Agent
– Live Connectivity including advanced options
– R-Server
 On-premise Dependencies & Keeping up-to-date
 Transporting
 Monitoring and Usage Tracking
 Other System Administration Tasks & Tips

© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 41

 Other System Administration Tasks & Tips
 BW Live Connections  Catalog
– Change the ‘Parallel number of queries’ from 0 to a max – For those without Analytics Hub, enable and configure
of 12
 Use a local web server for hosting:
 Content Namespace – Profile pictures (instead of user having to upload their
– See best practice own)
– Change before setting up Custom IdP o Add the web server to the white list in System-
Administration
 App Integration – Trusted Origins
– Allows other apps to embed SAP Analytics Cloud
– Static content for Application Building static files
(custom widgets etc.)
 Default Appearance
– The Logo is also used in the ‘clock’! – Custom fonts
o To use SAP Fiori icons within SAP Analytics Cloud,
download the Fiori Font
o Blog

© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 42

Additional Resources

https://www.sapanalytics.cloud/learning/
© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 43
Agenda
 Architecture
 Authentication
 Authorisations
 Data Security
– Acquired Data Models
– Live Connections
 On-premise Components
– Acquired Data: Cloud Connector and Cloud Agent
– Live Connectivity including advanced options
– R-Server
 On-premise Dependencies & Keeping up-to-date
 Transporting
 Monitoring and Usage Tracking
 Other System Administration Tasks & Tips

© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 44

Thank you.

Contact information:
Matthew Shaw
Solution Expert
SAP Analytics Cloud, SAP

Twitter: @MattShaw_on_BI
You can find the link at: https://www.sap.com/about/trust-center/cloud-service-status.html

Need to also get notifications on SCP as they’re not included in SAC updates currently.

--
3 mins we start looking at it.

10 send outage email communication.

Cloudl Paltform do a regular update (might be every 30 mins)

for SAC we don't do regular updates - not had the need to do so. Typucally a landscape outage

sac we will comms it down and we will comms when its back up. 

SCP does comm when down - SCP comms regular updates.

© 2020 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 46