Skip to main content

19.10 Security & Operating Model

1. BDC expands the security boundary​

Security may cross:

  • SAP source systems,
  • Datasphere,
  • BW,
  • SAC,
  • external platforms,
  • data products,
  • sharing mechanisms.

2. Enterprise control model​

Identity
  |
platform roles
  |
space / object access
  |
data access control
  |
data product authorization
  |
consumer entitlement

3. Separate duties​

Separate:

  • platform administration,
  • content installation,
  • data modeling,
  • product ownership,
  • security administration,
  • consumption.

4. Operating model​

Define:

  • platform owner,
  • domain data owner,
  • product owner,
  • data steward,
  • security owner,
  • operations/SRE,
  • FinOps owner.

5. Audit​

Record:

  • who installed content,
  • who changed access,
  • who published products,
  • who modified models,
  • who consumed sensitive data where auditing supports it.

6. Exercise​

Create an RACI for a BDC platform serving finance, procurement and sales.