SAP BTP · Account Model, Governance & Best Practices

How can the platform team let development teams perform privileged operations — restart a production app, create a database schema — without handing them direct access to those subaccounts?

Answer locked. Get the free KnowCard app to reveal it — plus spaced-repetition review so it actually sticks.

This is one card from the KnowCard library — thousands more across SAP, Linux, Python and more. In the app you get the answer, AI explanations, and cards that come back right before you would forget them. Free to start on iOS, Android or the web.

More in Account Model, Governance & Best Practices

If you deactivate SAP ID for admins, how do you keep an emergency way back into the global account — and how do you keep that emergency door from becoming the weak point?

For a high-security BTP setup, why might you register administrative users under a domain that has nothing to do with your company?

You're creating custom roles in the global account. What naming rule protects you from future SAP updates, and which old ABAP habit should you drop?

If you only ever introduce directories for one reason on BTP, what does SAP say that reason should be?

Beyond splitting subaccounts by dev/test/prod, what additional axes does SAP suggest at the subaccount level, and what do they buy you?

How does SAP recommend structuring role collections at the subaccount level, and how can you align them with an existing SAP ERP or S/4HANA landscape?

Start learning today

Free to start — download the app or use it in your browser.