Registration

Dear SAP Community Member,
In order to fully benefit from what the SAP Community has to offer, please register at:
http://scn.sap.com
Thank you,
The SAP Community team.
Skip to end of metadata
Go to start of metadata

 

If you want to use Microsoft Azure operated by 21Vianet (Azure China 21Vianet) which is a physically separated instance of cloud services located in mainland China, you must use the following links: 

For more information, see the Azure China 21Vianet documentation.

 

How to create a Microsoft Azure account?

As a prerequisite to create a Microsoft Azure account you must have a Microsoft account. To create a Microsoft Azure account, you have to navigate in your Web browser to this Microsoft Azure portal.

 

How to create a subscription in my Microsoft Azure account?

Login to your Microsoft Azure account using the credentials for your Microsoft account and then choose Add Subscription.

 

What is the difference between a Microsoft Azure account and a subscription?

A Microsoft Azure account determines how Microsoft Azure usage is reported and who the Account Administrator is. Each account contains as few as one or up to 50 subscriptions.

Subscriptions help you organize access to cloud service resources. They also help you control how resource usage is reported, billed, and paid for. Each subscription can have a different billing and payment setup, so you can have different subscriptions and different plans by department, project, regional office, and so on. Every cloud service belongs to a subscription, and the subscription ID may be required for programmatic operations.

Accounts and subscriptions are created at the Account Center. The person who creates the account is the Account Administrator for all subscriptions created in that account. That person is also the default Service Administrator for the subscription.

For more information, see the Microsoft Azure documentation.

 

How do I get the subscription ID of the subscription in my Microsoft Azure account?

  1. Log on to the Microsoft Azure Portal.
  2. In the navigation pane, choose Subscriptions. For your subscription, you can get the Subscription ID in the table:


How to connect to Microsoft Azure from SAP Cloud Appliance Library with the Standard Authorization type?

To create a solution instance in SAP Cloud Appliance Library, proceed as follows:

1.      From the Create Instance wizard on the step for the account, select the Standard Authorization type and choose Authorize to establish the connection to the Microsoft Azure cloud provider and grant permissions to SAP Cloud Appliance Library to access your Azure Active Directory.

2.      Then the consent dialog from Microsoft Azure is displayed and you must choose Accept.

3.      After that you will be redirected again to the SAP Cloud Appliance Library to continue with the creation of the solution instance.

Note that if your Microsoft Azure account in SAP Cloud Appliance Library is with a status Inactive, you can proceed as follows:

1.      In the SAP Cloud Appliance Library, open the account details.

2.      Choose Authorize to establish the connection to the cloud provider again and grant permissions to SAP Cloud Appliance Library to access your Azure Active Directory.

3.      Then the consent dialog from Microsoft Azure is displayed and you must choose Accept.

4.      After that you will be redirected again to the SAP Cloud Appliance Library.

 

What are the roles required by the Microsoft Azure user which will grant permissions to SAP Cloud Appliance Library with the Standard Authorization type?

Option 1: You are an administrator on the subscription, i.e. your user has the role Owner and has access to scope /subscriptions/<your subscription ID>.

Option 2: Your Microsoft Azure user has been assigned the role User Access Administrator and has access to scope /subscriptions/<your subscription ID>.

 

What are the roles required by the Microsoft Azure user which will grant permissions to SAP Cloud Appliance Library with the Extended Authorization for Kubernetes Cluster authorization type?

The roles required are the following:

  • Global Administrator for the Azure Active Directory.
  • Owner or User Access Administrator for the scope /subscriptions/<your_subscription_ID>.

How do I check the roles that have been assigned to my Microsoft Azure user in a subscription?

1.      Sing in to the Microsoft Azure Portal.

2.      In the navigation pane, choose Subscriptions. 

3.      Select your subscription and then choose My permissions.


How do I check the roles that have been assigned to my Microsoft Azure user in the Azure Active Directory?

1.      Sing in to the Microsoft Azure Portal.

2.      In the navigation pane, choose Azure Active Directory > Users. 

3.      Select your user and then choose Directory role.


How to connect to Microsoft Azure from SAP Cloud Appliance Library with the Authorization with Application type?

Prerequisites

You must execute the following steps to get the required MS Azure properties (Azure Active Directory ID, Application ID and Application Password) to create an account with the authorization type Authorization with Application in the SAP Cloud Appliance Library. 

1.      Log on to the Microsoft Azure portal.

2.      From the main menu choose App registrations and then click on New Application Registration.

3.      Specify the required fields and create the application.

Then you will be able to see the Application ID which will be needed for creating an account in the SAP Cloud Appliance Library.

4.      Go to Settings of the application and then choose Certificates & secrets.

In the Client secrets section, enter the Description field and choose Expiration Period, then choose Save. Note that the password will be displayed only when you save your entries, so you have to copy it from there.

5.      From the main menu go to Azure active directory and select Properties. From there you should copy the Directory ID which will be used on the account creation in the SAP Cloud Appliance Library.

6.      From the main menu go to Subscriptions and choose your subscription. From there you should copy the Subscription ID which will be used on the account creation in the SAP Cloud Appliance Library.

7.      Go to Access Control of the subscription and choose Add > Add role assignment.

8.      Choose the Contributor role and select your application. From the Assign access to dropdown, choose Azure AD user, group or service principal.

9.      Save your entries.

For more information about these properties, see the MS Azure documentation.  

 

Procedure

To create a solution instance in SAP Cloud Appliance Library, proceed as follows:

1.      From the Create Instance wizard on the step for the account, select the Authorization with Application type and specify the following MS Azure properties: Azure Active Directory ID, Application ID and Application Password.

2.      Choose Test Connection to ensure the correctness of the specified MS Azure properties.

Note that if your Microsoft Azure account in SAP Cloud Appliance Library is with a status Inactive, you can proceed as follows:

3.      In the SAP Cloud Appliance Library, open the account details and check the correctness of the specified MS Azure properties and the configured roles in the MS Azure portal.

4.      Choose Test Connection to ensure the correctness of the specified MS Azure properties.


How to access to backend servers on the Operating System (OS) level?

Depending on the overall requirements your solution may consist of one or more servers running either on a Linux OS and/or on a Windows OS.


Access to Linux OS on Backend

If you need OS access, you can use SSH connectivity:

Parameter IDValueDescription

OS User NamerootThe default Operating System administrator user.
OS Password<none>Use the private key (downloaded during the activation of the SAP instance in SAP Cloud Appliance Library) for logging on with the root user.

 

Access to Windows OS on Backend

If you need OS access, you can use RDP connectivity:

  • Microsoft Windows  : Start the Remote Desktop Connection using the Start Menu (All Programs > Accessories) or executing mstsc.exe.
  • Apple Mac OS X  Use the free Microsoft Remote Desktop app available in the Mac App Store to connect to your frontend.
  • Linux  : Use your preferred RDP client.

Parameter IDValueDescription

OS User NameAdministratorThe default OS administrator user for Windows.
OS Password<none>

The master password is used for accessing the system. It is provided by the user during the creation of the solution instance in SAP Cloud Appliance Library.

 

How to increase the quota for your subscription in Microsoft Azure portal?

To see the procedure how to increase the quota in your subscription, please check this blog.

 

  • No labels