Technology Blogs by SAP
Learn how to extend and personalize SAP applications. Follow the SAP technology blog for insights into SAP BTP, ABAP, SAP Analytics Cloud, SAP HANA, and more.
cancel
Showing results for 
Search instead for 
Did you mean: 
There are situations, when a Cloud Foundry Org is left without at active Org Manager. In such situations an active SubAccount Administrator can add a new Org Manager via the following process

  1. Subaccount Admin navigates to “BTP Cockpit -> Instances and Subscriptions -> Environments” – this is the table on the bottom of the screen

  2. There should be one “Cloud Foundry Runtime” Environment entry in the table

  3. Select “Update” from the “…” menu

  4. Press “Next >” to go to the next screen, where a JSON can be provided.

  5. Use the following format to provide the user details:


    1. For adding users with the default sap.ids origin use this format (no need to specify origin):















      {

          "usersToAdd": [

             {

             "email""john.do@sap.com",

             "id""I999999"

          }

        ]

      }







    2. For adding users with customIdp origin use this format:
      (This is only valid if you know the custom IDP value of the user, and the idp is registered under the CF framework)


















    3. {

          "usersToAdd": [

             {

             "email""john.do@sap.com",

             "id""I999999"

             "origin": "{{custom.idp.value}}"

          }

        ]

      }







    4. You can also add multiple users with and without origin:















      {

          "usersToAdd": [

             {

             "email""john.do@sap.com",

             "id""I999999"

          },

          {

             "email""john.do@sap.com",

             "id""I999999"

             "origin": "{{custom.idp.value}}"

          }

        ]

      }







    5. To remove users as org admin just change the name of the json struct to "usersToRemove" like so:















      {

          "usersToRemove": [

             {

             "email""john.do@sap.com",

             "id""I999999"

          }

        ]

      }








  6.  Press “Update Instance” to complete the process

  7. The Update takes a few seconds to complete, and once done, the chosen user will become Org Manager. To complete the process, this configuration has to be removed, else there will be errors like “User is already Org Manager”. To remove the configuration – follow the steps above, but replace the text from 5.) with “{}” and update the instance again

10 Comments
Wallace
Active Participant
0 Kudos
Thanks Vladimir,
I don't think this has happened yet, but in a larger company with multiple items in use, this will happen to us... and I suspect possibly others.
0 Kudos
Hi Wallace, we get at least 5 tickets about this per week and they are increasing. From compliance POV it was a hell to get permissions to access the org and do changes there
andreasgebhardt
Explorer
0 Kudos
Thank you Vladimir,

I'm not famailiar with json files and BTP... So, what do you mean in point 7. with replace the text from 5.) with “{}” ? Which text? Can you give an example, please.

Best regards

Andreas
avihai_tamari
Explorer
0 Kudos
Hello Andreas,

What Vladimir meant is to replace the json section mentioned in step 5:
{

    "usersToAdd": [

       {

       "email""john.do@sap.com",

       "id""I999999"

    }

  ]

}


With an empty json section like this: {}


Hope that's clear,

Avihai
ChetanSharma
Explorer
0 Kudos
Excellent Blog !!!
avihai_tamari
Explorer

vladimir.savchenko  - in the example with the custom idp, please emphasize that the "custom.idp" is just a placeholder and it must be replaced with the real custom idp name configured in the subaccount.

We had a few issues reported lately that failed because the customer just copy&paste this example and left the "origin:custom.idp" as is

KMiyamoto
Explorer
0 Kudos
Hello, Avihai Tamari.

I did what exactly you said.
I just copied "origin:custom.idp" and I can't finish the update.
How can I solve the problem?

Thank you.
avihai_tamari
Explorer
0 Kudos

Hi,
please don't use "origin:custom.idp" as is. if have a custom IDP configured, please replace the value "custom,idp" with its name. if you don't have a custom IDP, please omit the "origin" key

KMiyamoto
Explorer
0 Kudos
Thank you for your quick response.

I have custom IDP, but I already made mistake.
I'm waiting for hours to finish the update, but it's not finished.

Is there any way to stop the update?
Octav
Participant
0 Kudos
Hello,

what is the purpose of OrgManager?

Thank you

Octav