## Set up SAP Datasphere URL: https://docs.atlan.com/apps/connectors/data-warehouses/sap-datasphere/how-tos/set-up-sap-datasphere > Create an OAuth client and a database analysis user so Atlan can connect to SAP Datasphere and crawl metadata. # Set up SAP Datasphere :::warning Who can do this? You need administrator access to your SAP Datasphere tenant to create an OAuth client and a database analysis user. You may not have this access yourself. ::: Atlan connects to SAP Datasphere over two paths: the SAP Datasphere APIs, authenticated with OAuth 2.0, and the SAP HANA Cloud database that backs your tenant, authenticated with a database analysis user. Before you create the connector, prepare one credential of each type. ## Create OAuth client Atlan uses an OAuth 2.0 client-credentials grant to read spaces and the analytic-model catalog from the SAP Datasphere APIs. Create a technical-user OAuth client for Atlan to use. 1. On the SAP Datasphere home page, in the lower-left navigation, click **System** and then **Administration**. 2. On the **Administration** page, select the **App Integration** tab. 3. Under **OAuth Clients**, click **Add an OAuth Client**. 4. In the **New OAuth Client** dialog, configure the client: - For **Name**, enter a name for the client, such as `atlan-metadata-extraction`. Atlan generates the **OAuth Client ID** automatically when the client is created. - For **Purpose**, select **Technical User**. - For **User ID**, enter a user ID for the technical user, such as `atlan_metadata_user`. - For **Roles**, click **Select Roles**, select the following roles, and then click **OK**: - Data Warehouse Cloud Metadata Graph Consumer - Data Catalog User - Scoped Data Warehouse Cloud Integrator - Scoped Data Warehouse Cloud Consumer - For **Expiry Details**, select an expiry date for the client. - For **Token Details**, keep the default token lifetime of 60 minutes, or adjust it to suit your requirements. 5. Click **Add**. Atlan generates the **OAuth Client Secret** when the client is created. 6. Record the following values—you enter them in Atlan when you [crawl SAP Datasphere](https://docs.atlan.com/llms/connectors/sap-datasphere/crawl-sap-datasphere/llms.txt): - **OAuth Client ID** and **OAuth Client Secret** from the client you created. - **OAuth Token URL**: the **Token URL** shown at the top of the **App Integration** page. - **Datasphere Tenant URL**: your SAP Datasphere tenant base URL. ## Create database analysis user Atlan reads tables, views, and columns from the SAP HANA Cloud database that backs your tenant. Create a database analysis user with **Space Schema Access** enabled so Atlan has read access to the schemas of the spaces you want to catalog. :::info Enable **Space Schema Access** so the database analysis user can read across all spaces. Atlan needs this cross-space read access to catalog upstream lineage from replication flows back to their source systems—a user scoped to a single space can't support replication-flow lineage. ::: 1. On the SAP Datasphere home page, in the left navigation, click **System** and then **Configuration**. 2. On the **Configuration** page, select **Database Access** and then **Database Analysis Users**. 3. Click **Create**. 4. In the **Create Database Analysis User** dialog, configure the user: - For **Database Analysis User Name Suffix**, enter a suffix that identifies the user, such as `ATLAN`. SAP Datasphere prepends the fixed prefix `DWCDBUSER#` to your suffix to form the full user name—for example, `DWCDBUSER#ATLAN`. - Enable **Space Schema Access**. - For **Database Analysis User expires in**, select **Never** so the user doesn't expire and the connection keeps working. 5. Click **Create**. SAP Datasphere creates the user and displays its connection details. 6. Record the following values from the details dialog—you enter them in Atlan when you [crawl SAP Datasphere](https://docs.atlan.com/llms/connectors/sap-datasphere/crawl-sap-datasphere/llms.txt). These values are shown only once, so copy them before you close the dialog: - **SAP HANA Host**: the **Host Name** for the database. - **SAP HANA Port**: the **Port** for the database. The default is `443`. - **SAP HANA User**: the generated **User Name**. - **SAP HANA Password**: the generated **Password**. Atlan uses these read-only credentials to discover spaces and to read table, view, and column metadata. The connector never modifies data or objects in your tenant. ### Retrieve new password The password is shown only once when you create the user. If you missed it or need a new one, you can request a fresh password for the existing user without recreating it: 1. On the SAP Datasphere home page, in the left navigation, click **System** and then **Configuration**. 2. On the **Configuration** page, select **Database Access** and then **Database Analysis Users**. 3. Next to the database analysis user, click the information (**i**) icon. 4. Click **Request New Password**. SAP Datasphere generates a new password and displays it along with the host, port, and user name. 5. Copy the new **Password** and update the **SAP HANA Password** in Atlan. ## Next steps [Crawl SAP Datasphere assets](https://docs.atlan.com/llms/connectors/sap-datasphere/crawl-sap-datasphere/llms.txt): Configure and run the crawler to extract metadata from SAP Datasphere. ---