Create Users with Suitable Roles to Build Your Add-on Product
- How to configure users required for setting up an add-on build pipeline
- How to register an add-on for use in a global account
Prerequisites
- For the add-on build, set up a Jenkins CI/CD server using the CX server
- You need an S-user in SAP One Support Launchpad with user management authorization
- Entitlements for the Landscape Portal application
- A Git repository is created and a user with read access is available
- Step 1

Add Technical Platform User to Space in Subaccount 03 Build/Assemble:
To trigger a import in the assembly system, communication scenario SAP_COM_0510 is used.
To trigger the build process in assembly system, communication scenario SAP_COM_0582 is used.
The credentials for these 2 scenarios is retrieved by creating a service key in the system.As operator, assign a technical Cloud Foundry platform user as a space developer in subaccount 03 Build/Assemble. Later, this user’s credentials are stored in the Jenkins credentials and used to create service key.
Add Technical Platform User to Space in Subaccount 04 Build/Test:
For the add-on installation test, a test system is created in the space in subaccount 04 Build/Test
As an operator, assign a technical Cloud Foundry platform user as a space developer in the space in subaccount 04 Build/Test. Later, this user’s credentials are stored in the Jenkins credentials and used similar to earlier step in Build/Assemble
Create a Technical Communication User for Access to the Add-on Assembly Kit as a Service(
AAKaaS):As part of the add-on build process, the Add-on Assembly Kit is used. With
AAKaaS, the on-premise tooling is now available as a cloud service that is used by the build pipeline.
To access the service that is offered via SAP Support Launchpad, a technical communication user is used. Create such a technical communication userAdd technical communication user created above to Jenkins credentials store:
Finally, as a Jenkins administrator, add the credentials of the technical communication user to the Jenkins Credentials store
Register Add-On Product for Installation in Global Accounts:
The registration of a new add-on product is a manual step. Your add-on product should only be installed in ABAP systems in your global accounts for development and production. Therefore, the product needs to be created and global accounts need to be registered with SAP using the Landscape Portal application “Register Product”
- Step 2
As BTP Cockpit administrator(operator), to add a technical platform user to the space which shall contain the system for assembly,
-
Navigate to the global account for development

-
Navigate to the sub-account 03 Build/Assemble -> Cloud Foundry -> Spaces -> Build/Assemble

-
Within the space, navigate to Members->Add Members

-
Specify the email ID of the technical platform user and ensure the checkbox for space developer role is selected
-
Click OK
-
- Step 3
Repeat the steps from Step 2 for the sub-account 04 Build/Test and the Build/Test space. This will authenticate the technical platform user to create the system for add-on installation test.
As BTP Cockpit administrator(operator), to add a technical platform user to the space which shall contain the system for add-on installation test,
-
Navigate to the global account for development

-
Navigate to the sub-account 04 Build/Test -> Cloud Foundry -> Spaces -> Build/Test

-
Within the space, navigate to Members->Add Members

-
Specify the email ID of the technical platform user and ensure the checkbox for space developer role is selected
-
Click OK
-
- Step 4
In order to add the required users to the Jenkins Credentials Store, as Jenkins Administrator.
-
In the Jenkins dashboard, navigate to “Manage Jenkins”

-
In the Manage Jenkins section, navigate to the security section

-
Use the manage credentials option to maintain the following users:
- Technical CF Platform User(s) maintained in the steps, “Add Technical Platform User to space for assembly” and
“Add Technical Platform User to space for test” - Technical communication user created in the “Overview of user setup and add-on product registration” step

-
- Step 5
In order to build the add-on product, create a new Jenkins pipeline as Jenkins Administrator.
-
From the Jenkins Dashboard, select “New Item”

-
Provide a unique name to the item and select “pipeline” as the type. Click OK

-
Scroll to the pipeline settings under “Advanced Project Options” and select “pipeline script from SCM” from the dropdown. This enables the settings to be picked from a source code management repository such as from GitHub

-
Set SCM to “Git” and add your git repository URL

-
Configure credentials to access the repository with a user that has read access.
We shall configure different files of this GitHub repository in the next tutorial of this group. The linkage established by this step allows the pipeline to read content from configurations in various files of the repository
-
- Step 6
To register an add-on for installation in a global account,
-
As subaccount administrator of the 01 Develop sub-account, subscribe to the Landscape Portal application. Ensure you have enough entitlements in the sub-account for this step

-
As security administrator of the 01 Develop sub-account, add the
LandscapePortalAdminRoleCollectionto your user
-
Launch the Landscape Portal by finding it in the “Instances and Subscriptions” section
-
Open the “Register Product” application

-
Find your product in the list or create a new product if your add-on product name (example: /NAMESPC/PRODUCTX) does not exist in the list
-
Open the product details by clicking on the product name
-
Click Register.
-
- Step 7
Why do we need a technical platform user in the 04 Build/Test space?