Create Users

There are multiple ways to create users in SAP Analytics Cloud.

An administrator can use the Users page to add users, import users from a CSV file, or use SAML attributes to map to users in SAP Analytics Cloud.

Who Does This Apply To?

  • System administrators
  • System owner

Use the Users Page to Create Users

You can create individual users in SAP Analytics Cloud.

Prerequisites

You can select one or more roles while you're creating the user. Become familiar with the standard application roles, any other existing default roles, or custom roles defined in your tenant. But don't worry – you can still assign additional roles to the user after the initial creation.

Type of Role Description More Information

Standard application roles

The roles available depend on the licenses included in your subscription

Standard Application Roles

Custom roles

Variations on the standard roles, created to meet your company's needs

Create Roles

Default role

Assigned when the user is created if you select no other role

Assign Roles to Users and Teams
Note

You'll see a warning message if your SAP Analytics Cloud tenant has already exceeded the license limits. When you've reached the maximum usage limit, you'll be restricted from creating or updating any more users with that license. See, Manage License Usage Limits.

Context

The method described here assumes that SAP Analytics Cloud is using its default authentication provider. If you are using a custom SAML Identity Provider, you must provide slightly different information, depending upon how your SAML authentication is configured.

Procedure

  1. From the side navigation, go to Start of the navigation path Security Next navigation step  UsersEnd of the navigation path.
  2. Select (New) to add a new user to the user management table.
  3. Enter a User ID.
    Each user needs a unique ID. Only alphanumeric and underscore characters are allowed. The maximum length is 20 characters.
  4. Enter the user name details.
    Only Last Name is mandatory, but it is recommended that you provide a First Name, Last Name, and Display Name. Display Name will appear in user-facing screens.
  5. Enter an Email address.

    A welcome email with logon information will be sent to this address.

  6. Select the Manager who will approve requests this user makes for new role assignments.
    Users can request additional roles only if they have a custom role that allows for self-service.
  7. Select the icon and choose one or more roles from the list.

    If one or more default roles have already been created, you can leave Roles empty. Default roles will be assigned when you click save.

  8. Select (Save).

Results

A welcome email including an account activation URL will be sent to the user, so that the user can set an initial password and access the system.

Import Users from a File

You can create new users by importing user data that you have saved in a CSV file.

Prerequisites

The user data you want to import must be stored in a CSV file. At minimum, your CSV file needs columns for UserID, LastName, and Email, but it is recommended that you also include FirstName and DisplayName.

If you want all new users to be assigned the same role, set a default role before importing users. For more information, see Assign Roles to Users and Teams.

If you want to assign new users different roles, include a Roles column in the CSV file. The role IDs used for role assignment are outlined in Standard Application Roles.

Note

The first name, last name, and display name are linked to the identity provider, and can't be changed in the User list page, or when importing a CSV file. (In the User list page, those columns are grayed out.)

To edit those values, you'll need to use the user login, and edit that user's profile.

These are the available mapping parameters when importing CSV user data:

Parameter Description
User ID  
First Name  
Last Name  
Display Name  
Email  
Manager  
Roles  
Mobile  
Phone  
Office Location  
Function Area Can be used to refer to a user's team or area within their organization.
Job Title  
Clean up notifications older than Set in user settings: when to automatically delete notifications.
Email Notification Set in user settings.
Welcome message Message that is shown to the user on the home screen.
Page tips Enabled/disabled via the help center (deprecated).
Closed Page tips Closed page tips are tracked so that they are not shown again.
Closed Item Picker Tips Closed tooltips are tracked so that they won't be reopened again (for first time users).
Current Banner Saves which banner is currently showing.
Last Banner The UUID of the last closed banner.
Last Maintenance Banner Version The version when the last maintenance banner was shown.
Marketing email opt in Set in user settings.
Homescreen content is initialized If default tiles have been set for the home screen.
Expand Story Toolbar Set in user settings.
Is user concurrent If the user has a concurrent license.
Default Application The application that will launch when you access your SAP Analytics Cloud URL. The default application can be set in Start of the navigation pathSystem Next navigation step Administration Next navigation step System ConfigurationEnd of the navigation path or in the user settings.
On the Edit Home Screen dialog, a user can override all the default preferences that have been set by the administrator for the system (Start of the navigation pathSystem Next navigation step Administration Next navigation step Default AppearanceEnd of the navigation path). These are the preferences:  
Override Background Option  
Override Logo Option  
Override Welcome Message  
Override Home Search To Insight  
Override Get Started  
Override Recent Stories  
Override Recent Presentations  
Override Calendar Highlights  

Procedure

  1. From the side navigation, go to Start of the navigation path Security Next navigation step  UsersEnd of the navigation path.
  2. Select Start of the navigation path (Import Users) Next navigation step Import Users from FileEnd of the navigation path.
  3. In the Import Users dialog, choose Select Source File to upload your CSV file.
  4. Choose Define Mapping to assign the fields of your user data from the CSV file to the fields in user management.
  5. Select the appropriate entries for the Header, Line Separator, Delimiter, and Text Qualifier.
  6. Select OK when you've finished mapping.
  7. In the Import Users dialog, choose Import to upload your CSV file according to the defined mapping.

Next Steps

If the CSV file doesn't define roles, you must assign roles to the imported users or a default role will be applied. For more information, see Assign Roles to Users and Teams.

Map SAML Attributes to Users

You can map existing SAML user or group attributes to SAP Analytics Cloud user profiles.

Prerequisites

  • SAP Analytics Cloud is running on an SAP data center.

    Determine which environment SAP Analytics Cloud is hosted in by inspecting your SAP Analytics Cloud URL:

    • A single-digit number, for example us1 or jp1, indicates an SAP data center.
    • A two-digit number, for example eu10 or us30, indicates a non-SAP data center.
    Note
    If SAP Analytics Cloud is running on a non-SAP data center, you must do the user mapping in your SAML identity provider, and the steps below do not apply. For more information, see Step 6 in Enable a Custom SAML Identity Provider.
  • When you map SAML attributes to users, you'll need your Subaccount (S-User) details. Have these ready before you start. To find your S-User information in SAP Analytics Cloud, from the side navigation, go to Start of the navigation path System Next navigation step  Administration Next navigation step Data Source ConfigurationEnd of the navigation path.
  • You or the owner of your organization’s S-User account must submit an SAP Product Support Incident using the component: LOD-ANA-BI. In the support ticket, indicate that you want to map SAML attributes to user profiles, and include your SAP Analytics Cloud tenant URL.
    Note
    You need to open a support ticket each time you switch to a different custom IdP.
  • You have configured your system to authenticate users against a custom SAML Identity Provider (IdP). You are logged on with a SAML account that is assigned an administrative role in SAP Analytics Cloud. And your custom SAML IdP is configured to return one or more SAML user attributes in the SAML assertions that are issued to authenticated SAML users.

Context

To ensure that users' profiles in SAP Analytics Cloud are updated with the latest information from your SAML IdP, you can map SAML user attributes to the following fields in SAP Analytics Cloud:
  • First Name
  • Last Name
  • Display Name
  • E-Mail
  • Functional Area
  • Language
  • Custom1, Custom 2, and so on
Each time a user logs on to SAP Analytics Cloud, the latest information is read from their SAML assertion and updated in their SAP Analytics Cloud user profile.

Procedure

  1. From the side navigation, go to Start of the navigation path Security Next navigation step  UsersEnd of the navigation path.
  2. Select (Map SAML User Properties).
  3. In the Map SAML Attributes dialog, select a SAML Attribute.

    The list of SAML attributes is populated with up to three available mappings. Expand the list beside the selected attribute to change it.

    If you are connecting to an SAP HANA system, you can click properties found and all SAML attributes detected will be added to the list automatically.

  4. Select (New Mapping Definition) to add additional SAML Attributes if necessary.
  5. Select a Target Property for each SAML attribute.
  6. Select Save.

Results

User profiles will be updated with SAML information.

Next Steps

To edit a user's SAML mapping, see Modify Users.