✦TL;DR

Set up user accounts and permissions required for SAP BW/4HANA metadata extraction in Atlan.

||

Your AI can read this via Docs MCPcurl -fsSL "https://docs.atlan.com/install-docs-mcp" | bashConnect

Set up SAP BW/4HANA Public Preview

Create a dedicated service user in SAP BW/4HANA and assign the required RFC permissions so Atlan can extract metadata from your system.

Prerequisites

Before you begin, make sure you have:

• Administrative access to SAP BW/4HANA.
• Self-Deployed Runtime deployed that meets the system requirements. For installation, see Install Self-Deployed Runtime.
• Reviewed how Atlan connects to SAP BW/4HANA to understand the connection model before configuring access.
• SAP system details, including:
  • Host
  • System number
  • Client number

SAP Java Connector (JCo)

Atlan reads metadata from SAP BW/4HANA over RFC using the SAP Java Connector (JCo) 3.1 SDK.

You need SAP JCo 3.1 whether or not you use Self-Deployed Runtime. Download it from the SAP Java Connector page. You need an SAP S-user to download it. Work with your Atlan implementation team to put the JCo library in the right place for your deployment.

Network requirements

The runtime connects to SAP BW/4HANA over RFC, so all traffic is outbound from the runtime to your SAP system. Allow outbound traffic on these ports through your firewall, where NN is your SAP system number from 00 to 99:

Port	SAP service	When it's needed
33NN	Gateway	Always. With Message Server, open it to every application server in the logon group.
36NN	Message server	Only when Connection Type is Message Server. Use the port your message server listens on if it isn't the default.
3299	SAProuter	Only when Use SAP Router is Yes. The runtime connects to the SAProuter host instead of the SAP system directly. 3299 is the SAProuter default; if your SAProuter listens on a different port, open that port instead.

For example, for system number 00, open outbound port 3300, plus 3600 if you connect through a message server.

Create communication user for metadata extraction

1. In the SAP GUI command field, enter SU01 and press Enter to open User Maintenance.
2. In the User field, enter a name for the new service user and click Create.
3. On the Address tab, provide the required contact information.
4. Open the Logon Data tab and:
   • Set an initial password (enter it twice).
   • Set User Type to C (Communications Data).
5. Switch to the Roles tab and assign roles that enable:
   • Remote function call (RFC) execution
   • Table-level read access for metadata tables
   • Access to system-level information
6. Verify that the assigned roles enable execution of these RFC modules:
   • STFC_CONNECTION: Verifies connectivity between Atlan and SAP BW/4HANA.
   • RFC_SYSTEM_INFO: Retrieves system metadata such as SYSID, operating system, and release version.
   • RFC_READ_TABLE: Enables table-level reads for metadata extraction.
7. Click Save to confirm the changes.

note

The user must change the password on first login.

Next steps

• Crawl SAP BW/4HANA: Follow the instructions to extract metadata using the configured service user.