Introduction
In SAP Analytics Cloud (SAC), managing access and security begins with a clear understanding of Users, Roles, and Teams. These three foundational elements form the structure that governs who can access what, and what actions they can perform within your SAC environment.
What Are Users, Roles, and Teams?
Users
A user is any individual who logs into SAC with a unique set of credentials. When a user is created, they are typically assigned a username, email address, and license type. Every action performed in SAC is tied back to a user identity.
Users can:
- Be assigned one or more roles
- Belong to one or more teams
- Have personalized access to folders and data, based on their assigned permissions
Roles
A role defines a set of permissions that determine what a user can do in SAC. Permissions may include the ability to:
- View dashboards
- Create or edit models and stories
- Manage user accounts or security settings
SAC includes several standard roles out of the box (such as Viewer, Admin, and Content Creator), but custom roles can also be created to reflect specific organizational needs. Roles are assigned either directly to users or to entire teams.
Teams
A team is a group of users who share similar responsibilities or access requirements. Instead of managing permissions for users one by one, SAC allows administrators to assign roles to a team. All members of that team then inherit the same access rights.
Teams are useful for:
- Organizing users by department, project, or job function
- Simplifying security administration
- Ensuring consistent access across groups of users
Why Are These Elements Foundational to SAC Security?
Effective access management in SAC relies on clearly defined users, roles, and teams. These elements serve as the building blocks for maintaining data privacy, content security, and compliance. When configured properly, they ensure that:
- Users only see the content and data relevant to them
- Permissions are consistent and auditable
- Administrative overhead is reduced through the use of teams and role templates
Without this structure, organizations risk either overexposing sensitive information or creating bottlenecks in user productivity.
Types of Roles in SAP Analytics Cloud
| Type | Description |
|---|---|
|
Viewer |
Grants read-only access. Viewers can open dashboards, stories, and reports, but cannot modify them. Ideal for stakeholders or executives who only need to consume content. |
|
Content Creator |
Allows users to build, edit, and manage stories, models, and dashboards. Best suited for business analysts and power users who are responsible for content development. |
|
Admin |
Provides full access to system configuration and user management. Admins can assign roles, configure security, and manage tenant-level settings. |
|
System Owner |
The highest-level role in SAC. This role is typically assigned to a single technical user responsible for maintaining and managing the entire SAC environment. |
Summary
Getting familiar with how Users, Roles, and Teams work in SAP Analytics Cloud is key to setting up a secure and well-organized system. By using these tools effectively, you can manage access with confidence, streamline admin tasks, and make sure everyone has the right level of access to the data and content they need.
Want to dive deeper into how Users, Roles, and Teams work in SAP Analytics Cloud? Explore the full SAP Booster course here.
