Installing and Administering SAP Enterprise Architecture Designer, Edition for SAP HANA

48 Pages·2017·1.39 MB·English

USER GUIDE | PUBLIC
SAP Enterprise Architecture Designer
Document Version: 1.0.4 – 2018-07-27
Installing and Administering SAP Enterprise
Architecture Designer, Edition for SAP HANA
All rights reserved.
mpany.
ffiliate co
P a
A
S
E or an
S
P
A
S
8 THE BEST RUN
01
© 2
Content
1 Installing and Administering SAP Enterprise Architecture Designer, Edition for SAP HANA
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
2 Installing SAP EA Designer. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5
3 Upgrading SAP EA Designer. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7
4 Controlling Repository Access. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
4.1 Creating Repository Users. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10
4.2 Managing Externally-Authenticated Repository Users. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12
4.3 Creating Repository Groups. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14
Adding Users and Groups to a Group. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Deleting a Group. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
4.4 Granting Rights to Users and Groups. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
4.5 Granting Access Permissions on Repository Items. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
4.6 Pushing Diagrams and Folders to Users' Homepages. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
4.7 Unblocking Blocked Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .19
4.8 Deactivating Users. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
4.9 Connecting to SAP EA Designer with SAP PowerDesigner. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20
Obtaining Connection Information for the Repository. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Creating the PowerDesigner Repository Definition for the SAP EA Designer Repository. . . . . . . . .21
5 Configuring the SAP EA Designer Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
5.1 Connecting to a License Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Installing a License Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Obtaining Licenses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Troubleshooting with lmutil. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26
5.2 Connecting to an LDAP Server for User Authentication. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26
5.3 Connecting to an SMTP Server for Notifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
5.4 Defining a Password Policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
5.5 Registering the Certificate Authority Root Certificate. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
5.6 Configuring the Full-Text Search Index. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .31
5.7 Installing JDBC Drivers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
6 Monitoring Repository Activities. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
6.1 Logging Activities in XSA. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35
7 Customizing Object Properties. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .36
7.1 Creating Custom Properties. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Installing and Administering SAP Enterprise Architecture Designer, Edition for SAP HANA
2 PUBLIC Content
7.2 Creating New Types of Dependencies. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .38
7.3 Modifying Lists of Values. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .40
8 SAP Enterprise Architecture Designer, Edition for SAP HANA Security Guide. . . . . . . . . . . . . .41
8.1 Auditing and Logging. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .41
8.2 Data Protection and Privacy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .42
Personal Data. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
Deletion of Personal Data. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .42
Change Logging for Personal Data. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43
8.3 Identity and Access Managment. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
8.4 Network and Communication Security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
8.5 Cookies. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .46
Installing and Administering SAP Enterprise Architecture Designer, Edition for SAP HANA
Content PUBLIC 3
1 Installing and Administering SAP
Enterprise Architecture Designer, Edition
for SAP HANA
One or more administrators must install and configure SAP Enterprise Architecture Designer, Edition for SAP
HANA and manage repository users and groups. Administrators can also monitor repository logs and d efine
extensions to make custom properties available for objects.
Installing and Administering SAP Enterprise Architecture Designer, Edition for SAP HANA
Installing and Administering SAP Enterprise Architecture Designer, Edition for SAP
4 PUBLIC HANA
2 Installing SAP EA Designer
SAP EA Designer can be installed in your SAP HANA 2.0 system using the SAP HANA XS Advanced Cockpit.
Prerequisites
To install SAP EA Designer, you must have an XSA user with the following role collections:
● XS_CONTROLLER_ADMIN (or XS_CONTROLLER_USER with the SpaceDeveloper role for the space in
which to perform the installation).
● XS_AUTHORIZATION_ADMIN
● XS_USER_ADMIN
 Note
For information about installing SAP EA Designer in HANA Express, see your HANA Express Getting Started
guide.
 Note
For information about upgrading an existing SAP EA Designer installation, see Upgrading SAP EA Designer
[page 7].
Procedure
1. Download the latest version of SAP EA Designer from the SAP Support Portal.
a. Go to https://launchpad.support.sap.com/#/softwarecenter and search for EA Designer.
b. Select SAP EA DESIGNER FOR SAP HANA Maintenance Product SAP EA DESIGN FOR SAP HANA
1.0 COMPRISED SOFTWARE COMPONENT VERSIONS SAP EA DESIGN FOR SAP HANA 1.0 .
c. Select the XSACHANAEAD<version>.zip item with the most recent release date and download it.
2. Log into SAP HANA XS Advanced Cockpit on your HANA 2.0 server, which is by default available at:
https://<HOST>:51023
3. Install the XSACHANAEAD<version>.zip file to your HANA 2.0 server.
a. From the SAP HANA XS Advanced Cockpit homepage, select Application Monitor, find product-
installer-ui in the list and click the URL link to go to XSA Application Lifecycle Management.
b. In the Software Components page, click Install/Update, click in the Installation Archive field, navigate to
and select your downloaded XSACHANAEAD<version>.zip file, and click Open.
c. Click Continue and, once the upload of the file is complete, click Start Installation.
Installing and Administering SAP Enterprise Architecture Designer, Edition for SAP HANA
Installing SAP EA Designer PUBLIC 5
The installation may take several minutes and is complete when Validation, Deployment, and
Registration show green check marks.
d. When the installation is complete, return to the SAP HANA XS Advanced Cockpit homepage.
4. Obtain the address to access SAP EA Designer.
a. From the SAP HANA XS Advanced Cockpit homepage, select Application Monitor, find eadesigner in
the list, and click the URL link to go to the SAP EA Designer homepage.
b. Note the URL to communicate to users, and return to the SAP HANA XS Advanced Cockpit homepage.
5. Create a role collection to contain the EADesigner_Administrator application role.
a. From the SAP HANA XS Advanced Cockpit homepage, select Application Role Builder, and navigate to
the Role Collection page.
b. Click the New Role Collection tool at the bottom of the list, enter the following values, and click Create:
○ Name: EA_DESIGNER_ADMIN
○ Description: Perform administration tasks in EA Designer.
c. Click the Roles tab, click Add Application Role, enter the following values, and then click OK to add the
EADesigner_Administrator to the EA_DESIGNER_ADMIN role collection:
○ Application Name: eadesigner!i1
○ Template Name: EADesigner_Administrator
○ Application Role: EADesigner_Administrator
d. Click Save to save your changes, and return to the SAP HANA XS Advanced Cockpit homepage.
6. Designate one or more XSA users as SAP EA Designer administrators, and provision them with the
EA_DESIGNER_ADMIN role collection.
a. From the SAP HANA XS Advanced Cockpit homepage, select User Management, and open the user
that you want to designate as the initial SAP EA Designer administrator.
b. Click the Role Collections tab and click the Add button.
c. Select the EA_DESIGNER_ADMIN role collection in the list and click OK.
d. Click Save to save your changes, and return to the SAP HANA XS Advanced Cockpit homepage.
e. Communicate the URL to the designated XSA users, and instruct them to use the Logon with your
HANA User link to enter their credentials.
Installing and Administering SAP Enterprise Architecture Designer, Edition for SAP HANA
6 PUBLIC Installing SAP EA Designer
3 Upgrading SAP EA Designer
You can upgrade your SAP EA Designer installation in your SAP HANA 2.0 system using the SAP HANA XS
Advanced Cockpit.
Prerequisites
To upgrade SAP EA Designer you must have an XSA user with the following role collections:
● XS_CONTROLLER_ADMIN (or XS_CONTROLLER_USER with the SpaceDeveloper role for the space in
which to perform the upgrade).
Procedure
1. Download the latest version of SAP EA Designer from the SAP Support Portal.
a. Go to https://launchpad.support.sap.com/#/softwarecenter and search for EA Designer.
b. Select SAP EA DESIGNER FOR SAP HANA Maintenance Product SAP EA DESIGN FOR SAP HANA
1.0 COMPRISED SOFTWARE COMPONENT VERSIONS SAP EA DESIGN FOR SAP HANA 1.0 .
c. Select the XSACHANAEAD<version>.zip item with the most recent release date and download it.
2. Log into SAP HANA XS Advanced Cockpit on your HANA 2.0 server, which is by default available at:
https://<HOST>:51023
3. Install the XSACHANAEAD<version>.zip file to your HANA 2.0 server.
a. From the SAP HANA XS Advanced Cockpit homepage, select Application Monitor, find product-
installer-ui in the list and click the URL link to go to XSA Application Lifecycle Management.
b. In the Software Components page, select XSAC_HANA_EA_D, and click Install/Update.
c. Click in the Installation Archive field, navigate to and select your downloaded
XSACHANAEAD<version>.zip file, and click Open.
d. Click Continue and, once the upload of the file is complete, click Start Installation.
The upgrade may take several minutes and is complete when Validation, Deployment, and Registration
show green check marks.
Installing and Administering SAP Enterprise Architecture Designer, Edition for SAP HANA
Upgrading SAP EA Designer PUBLIC 7
4 Controlling Repository Access
The repository administrator is responsible for controlling access to the documents stored in the repository by
creating users and groups and assigning them rights, permissions, and profiles.
Context
Repository rights give users access to general repository features, while permissions give them access to
particular locations in the repository. The following rights and permissions are available:
Rights (Entire Repository) Permissions (Per Folder or Item)
● Connect - Connect to the repository and view dia­ ● List - View the document or folder in the repository
grams in SAP EA Designer. browser and in search results. Without this permission,
● Edit on Web - Create and edit diagrams in SAP EA the folder or document is hidden from the user.
Designer.
● Read - Also open and compare documents.
● Edit Extensions on Web - Create and edit cus­
● Submit - Also propose changes to the document for
tom properties in SAP EA Designer. Gives access to the
Administration/Extensions tile. review by a user with Write permission.
● Manage All Documents - Perform any action on ● Write - Also review changes by other users and pub­
any document version. Implicitly includes Full per­ lish changes directly.
mission on all repository documents. Gives access to
● Full - Also move and delete documents, and manage
the Administration/Activities/Log tile.
permissions granted to users and groups.
● Manage Users & Permissions - Create, modify,
and delete repository users and groups, grant them
 Note
rights, and add them to groups. Users with this right can
list all repository documents and set permissions on Administrators, who have implicit Full permission
them without needing explicit Full permission. Gives
on all repository objects, will only receive diagrams
access to the Administration/Users, Administration/
for review if they have been granted explicit Write
Groups, and Administration/Activities/Security Log tiles.
permission on them.
● Manage Repository - Create, upgrade, and delete
the repository database. Gives access to the
Administration/Settings tile.
Procedure
1. [recommended] Connect the repository to an SMTP server to enable the automatic sending of emails for
passwords, changelist submissions, and other notifications (see Connecting to an SMTP Server for
Notifications [page 29]).
2. Determine how you will manage user authentication. You can choose one or more of:
○ SAP HANA XS Advanced authentication - Users with SAP HANA accounts can log in using their XS
Advanced user and password.
Installing and Administering SAP Enterprise Architecture Designer, Edition for SAP HANA
8 PUBLIC Controlling Repository Access
○ Repository-managed authentication - Specify an appropriate password policy (see Defining a
Password Policy [page 30]).
○ LDAP authentication - Connect the repository to an LDAP server to allow users to connect with their
corporate credentials (see Connecting to an LDAP Server for User Authentication [page 26]).
 Note
LDAP and XS Advanced are only used for authentication. Rights and permissions on repository folders
and documents are controlled in the repository.
3. [optional] Create high-level functional groups (see Creating Repository Groups [page 14]) to organize
users by type and assign appropriate rights to them to govern general actions that they can perform in the
repository (see Granting Rights to Users and Groups [page 16]).
For example:
Groups Rights
Administrators Connect, Manage All Documents, Manage Users & Permissions, Manage Repository
Senior Modelers Connect, Edit on Web, Edit Extensions on Web
Modelers Connect, Edit on Web
Stakeholders Connect (to provide read-only access to SAP EA Designer).
 Note
There is no requirement to create groups - you can assign rights and permissions to individual users -
but we recommend that in all but the smallest deployments, you do create groups to simplify the
process.
4. Create an appropriate folder structure in the repository to enable you to group documents by project or in
any other appropriate way, and to simplify the granting of permissions.
In this example, we imagine the following simple folder structure:
○ Library
○ EA
○ Process Map
○ Process Diagrams
○ HR
○ Sales
○ Data
5. Determine your review policy either at a global or project by project level. SAP EA Designer supports the
following kinds of policy:
○ Simple review - Change lists submitted by users with the Submit permission are reviewed by users
with the Write or Full permission.
○ Peer review - Users with the Write or Full permission voluntarily submit change lists for review.
○ Direct check in - The Submit permission and change lists are not used, and users all check in changes
without review.
6. Create development groups and implement your review policies by assigning appropriate permissions to
control what actions users and groups can perform on particular repository documents and folders.
Installing and Administering SAP Enterprise Architecture Designer, Edition for SAP HANA
Controlling Repository Access PUBLIC 9
In this example, we propose a simple group structure with permissions based on role and line of business:
○ Enterprise Architects - Have full control over all documents.
○ Process Analysts - Maintain the process map and review business process diagrams for publication in
the repository.
○ Process Owners - May submit business process diagrams for their domain.
○ Data Modelers - Maintain data models.
○ Stakeholders - Have read access to all documents by default.
Process Dia­
Process Dia­
Group Library EA Process Map grams/HR grams/Sales Data
Enterprise Ar­ Full Full Full Full Full Full
chitects
Process Ana­ Submit Read Write Write Write Read
lysts
Process Own­ Submit Read Read Submit Read Read
ers - HR
Process Own­ Submit Read Read Read Submit Read
ers - Sales
Data Modelers Submit Read Read Read Read Write
Stakeholders Read Read Read Read Read Read
7. Create as many users as necessary either manually (see Creating Repository Users [page 10]) or via
LDAP (see Managing Externally-Authenticated Repository Users [page 12]) and assign them to
appropriate groups (see Adding Users and Groups to a Group [page 15]) according to their roles and
project responsibilities.
There is no limit to the number of groups to which a user or group can be assigned, and users benefit from
the cumulative total of all the rights and permissions they receive.
4.1 Creating Repository Users
The repository administrator is responsible for creating user accounts to enable users to connect to the
repository and access the content that they need.
Context
No users are created by default in the SAP EA Designer repository. You must designate an XSA user as the first
SAP EA Designer administrator (see Installing SAP EA Designer [page 5]).
Installing and Administering SAP Enterprise Architecture Designer, Edition for SAP HANA
10 PUBLIC Controlling Repository Access