SAP Odata Setup Guide Private Preview

Follow our setup guide to connect SAP Odata to your destination using the Fivetran connector.

Prerequisites

To connect your SAP OData API to Fivetran, you need:

An SAP Communication or System user with the permissions and authorizations specified in the Configure SAP user section
The hostname or IP address of your SAP application server
The HTTPS port configured on your SAP system
The username and password associated with the SAP user
The OData services (based on CDS views) that you want to extract data from, exposed and available for consumption
IMPORTANT: The OData services must Reside in the SAP namespace /sap/opu/odata/sap and be registered in the SAP Gateway using transaction /IWFND/MAINT_SERVICE.

Setup instructions

Configure SAP user

This section lists the authorizations that you must assign to an SAP Communication or System user to access SAP Gateway services and extract data from Core Data Services (CDS) views. These authorizations cover:

OData services
Batch jobs
Fivetran connectivity
CDS views
Business Warehouse (BW) extractors
OData catalog

To access SAP Gateway services, you need the authorization object S_SERVICE. This object contains two fields, SRV_NAME and SRV_TYPE, which you must configure with encoded values. Locate and reference the encoded values for these fields using the SAP standard dialog (TADIR entries).

For troubleshooting, use the USOBHASH table to identify missing authorizations.

Authorization for OData services

Assign the following authorizations to allow user access to OData endpoints:

Authorization Object	Authorization Field	Authorization Value
S_SERVICE	Program ID	R3TR
	Object Type	IWSG
	Object Name	<Service Group Name>
S_SERVICE	Program ID	R3TR
	Object Type	IWSV
	Object Name	<Service Name>

Authorization for batch jobs

SAP data extraction runs as background jobs. Assign the following authorizations to enable the creation and release of these jobs:

Authorization Object	Authorization Field	Authorization Value
S_BTCH_ADM	BTCADMIN	Y
S_BTCH_JOB	JOBACTION	RELE
	JOBGROUP	*

Authorization for Fivetran connectivity

Fivetran requires access to the SAP Gateway Catalog Service (IWFND/CATALOGSERVICE/) to verify connectivity with your SAP system. This service is part of the standard SAP namespace (/sap/opu/odata) and must be registered and activated in the SAP Gateway using transaction /IWFND/MAINT_SERVICE. To allow access to the Catalog Service, assign the following authorization values to the SAP user:

Authorization Object	Authorization Field	Authorization Value
S_SERVICE	Program ID	R3TR
	Object Type	IWSG

Authorization for data extraction

Assign the following authorizations to extract data from CDS views:

Authorization Object	Authorization Field	Authorization Value
S_DHCDCSTP	DHCDCSBTYP	ODP
	ACTVT	03

Authorization for OData catalog

Assign the following authorizations to access the OData catalog service:

Authorization Object	Authorization Field	Authorization Value
S_START	AUTHPGMID	R3TR
	AUTHOBJTYP	G4BA
	AUTHOBJNAM	/IWFND/CONFIG

Choose connection method

Decide on your preferred method for connecting Fivetran to your SAP Application Server.

Connect directly

Fivetran connects directly to your SAP system's application host, specified in the Hostname field during connection setup.

Connect using private networking

Private networking enables secure communication between private networks and services without exposing traffic to the public internet. It is the most secure connection method available.

IMPORTANT: You must have a Business Critical plan to use private networking.

We support the following private networking providers:

AWS PrivateLink – Used for Virtual Private Clouds (VPCs) and AWS-hosted or on-premises services. See our AWS PrivateLink setup guide for details.
Azure Private Link – Used for Virtual Networks (VNets) and Azure-hosted or on-premises services. See our Azure PrivateLink setup guide for details.

Finish Fivetran configuration

In the connection setup form, enter the Destination schema name of your choice.
(Hybrid Deployment only) If your destination is configured for Hybrid Deployment, the Hybrid Deployment Agent associated with your destination is pre-selected in the Select an existing agent drop-down menu. To use a different agent, select the agent of your choice, and then select the same agent for your destination.
In the Username field, enter your SAP system username.
In the Password field, enter the password associated with your SAP system username.
In the Hostname field, enter your SAP system hostname.
In the Port field, enter your SAP system port number.
Click Save & Test. Fivetran will take it from here and sync your SAP OData data.