Skip to main content

Set up SAP Datasphere

Connect docs via MCP
Who can do this?

You need administrator access to your SAP Datasphere tenant to create an OAuth client and a database analysis user. You may not have this access yourself.

Atlan connects to SAP Datasphere over two paths: the SAP Datasphere APIs, authenticated with OAuth 2.0, and the SAP HANA Cloud database that backs your tenant, authenticated with a database analysis user. Before you create the connector, prepare one credential of each type.

Create OAuth client​

Atlan uses an OAuth 2.0 client-credentials grant to read spaces and the analytic-model catalog from the SAP Datasphere APIs. Create a technical-user OAuth client for Atlan to use.

  1. On the SAP Datasphere home page, in the lower-left navigation, click System and then Administration.

  2. On the Administration page, select the App Integration tab.

  3. Under OAuth Clients, click Add an OAuth Client.

  4. In the New OAuth Client dialog, configure the client:

    • For Name, enter a name for the client, such as atlan-metadata-extraction. Atlan generates the OAuth Client ID automatically when the client is created.
    • For Purpose, select Technical User.
    • For User ID, enter a user ID for the technical user, such as atlan_metadata_user.
    • For Roles, click Select Roles, select the following roles, and then click OK:
      • Data Warehouse Cloud Metadata Graph Consumer
      • Data Catalog User
      • Scoped Data Warehouse Cloud Integrator
      • Scoped Data Warehouse Cloud Consumer
    • For Expiry Details, select an expiry date for the client.
    • For Token Details, keep the default token lifetime of 60 minutes, or adjust it to suit your requirements.

  5. Click Add. Atlan generates the OAuth Client Secret when the client is created.

  6. Record the following values—you enter them in Atlan when you crawl SAP Datasphere:

    • OAuth Client ID and OAuth Client Secret from the client you created.
    • OAuth Token URL: the Token URL shown at the top of the App Integration page.
    • Datasphere Tenant URL: your SAP Datasphere tenant base URL.

Create database analysis user​

Atlan reads tables, views, and columns from the SAP HANA Cloud database that backs your tenant. Create a database analysis user with Space Schema Access enabled so Atlan has read access to the schemas of the spaces you want to catalog.

info

Enable Space Schema Access so the database analysis user can read across all spaces. Atlan needs this cross-space read access to catalog upstream lineage from replication flows back to their source systems—a user scoped to a single space can't support replication-flow lineage.

  1. On the SAP Datasphere home page, in the left navigation, click System and then Configuration.

  2. On the Configuration page, select Database Access and then Database Analysis Users.

  3. Click Create.

  4. In the Create Database Analysis User dialog, configure the user:

    • For Database Analysis User Name Suffix, enter a suffix that identifies the user, such as ATLAN. SAP Datasphere prepends the fixed prefix DWCDBUSER# to your suffix to form the full user name—for example, DWCDBUSER#ATLAN.
    • Enable Space Schema Access.
    • For Database Analysis User expires in, select Never so the user doesn't expire and the connection keeps working.

  5. Click Create. SAP Datasphere creates the user and displays its connection details.

  6. Record the following values from the details dialog—you enter them in Atlan when you crawl SAP Datasphere. These values are shown only once, so copy them before you close the dialog:

    • SAP HANA Host: the Host Name for the database.
    • SAP HANA Port: the Port for the database. The default is 443.
    • SAP HANA User: the generated User Name.
    • SAP HANA Password: the generated Password.

Atlan uses these read-only credentials to discover spaces and to read table, view, and column metadata. The connector never modifies data or objects in your tenant.

Retrieve new password​

The password is shown only once when you create the user. If you missed it or need a new one, you can request a fresh password for the existing user without recreating it:

  1. On the SAP Datasphere home page, in the left navigation, click System and then Configuration.

  2. On the Configuration page, select Database Access and then Database Analysis Users.

  3. Next to the database analysis user, click the information (i) icon.

  4. Click Request New Password. SAP Datasphere generates a new password and displays it along with the host, port, and user name.

  5. Copy the new Password and update the SAP HANA Password in Atlan.

Next steps​

Crawl SAP Datasphere assets: Configure and run the crawler to extract metadata from SAP Datasphere.