Understanding the integration

This guide aims to familiarize SAP admin users with the mapping of SAP entities to UiPath.

Organizational structure

UiPath creates a unique organization for every SAP customer that pairs with a unique directory. Additionally, for each subaccount tied to an SAP directory, UiPath creates a tenant within the UiPath organization. The UiPath system essentially mirrors the structure of SAP directories and their linked subaccounts into corresponding UiPath organizations and respective tenants.

UiPath tenants are established within the same regions as the SAP subaccounts they represent. For more information on available UiPath regions, refer to Data residency.

User authentication

Users can sign in via SAP Build Process Automation (SBPA) or directly through UiPath. Regardless of the method, they are redirected to the SAP identity provider for verification.

Roles and access

Each role in SAP corresponds to a role in UiPath that grants access to certain UiPath resources.

SAP role	SAP group	UiPath group	UiPath service	UiPath service role	UiPath folder role
ProcessAutomationAdmin	ProcessAutomation-<subdomain>-Admin	<Subdomain>-ProcessAutomationAdmin	Orchestrator (includes Integration Service, Action Center and Assistant)	SAP Build Orchestrator Administrator	SAP Build Folder Administrator
			Data Service	Administrator Designer Data writer	N/A
ProcessAutomationDeveloper	ProcessAutomation-<subdomain>-Developer ProcessAutomation-<subdomain>-Delegate	<Subdomain>-ProcessAutomationDeveloper	Orchestrator (includes Integration Service, Action Center and Assistant)	SAP Build Allow to be Folder Administrator SAP Build Allow to be Folder Administrator with Packages	SAP Build Folder Administrator
			Data Service	Designer Data writer	N/A
ProcessAutomationParticipant	ProcessAutomation-<subdomain>-Participant	<Subdomain>-ProcessAutomationParticipant	Orchestrator (includes Integration Service, Action Center and Assistant)	No role	SAP Build ProcessAutomationParticipant
			Data Service	Data writer	N/A
ProcessAutomation-UiPathOrgManager	ProcessAutomation-<subdomain>-UiPathOrgManager	Administrators	Platform	Note: The Administrators group is mapped by default to all available services. The mapping grants any user that is part of this group with administrative permissions to all available services. For example, the Administrators group is mapped to the Orchestrator Administrator role, which grants the users from the group access to perform any action in Orchestrator.	No role

For more information about SAP Build Process Automation roles, refer to SAP documentation on Authorizations.

For more information about Data Service roles, refer to Standard roles.

Orchestrator roles

Roles and the permissions they include allow for a precise level of access to Orchestrator resources and operations, ensuring that each user has the exact permissions needed to perform their specific activities.

SAP-specific roles are automatically granted based on the authorization given to each user on the SAP platform. As such, you can check each role's definition in the Orchestrator interface, but you cannot edit any of its permissions.

For details, refer to SAP-specific roles.