SAP architecture
ReferenceSAP data extraction governance architecture
ODP-free extract: FILE FoolproofDefault, MDG DRF→CPI, optional Mode A — with Domain 7 evidence into GRS.
Architecture diagram
Data or evidenceIdentity or control
Callout 1
Source objects
Tables, MDG, CDC marks
Allowlisted catalog, explicit authorization, no RODPS_REPL_*.
Need this architecture for your internal review?
Request an editable .drawio source stencil for internal architecture validation.
Detail
Business data: SAP to middleware to lake. Control evidence: manifests and .ok to the connector to GRS. Optional Mode A (Microsoft ABAP SDK) only when ICM outbound is already approved.
- Zero Azure credentials on S/4 by default
- S_DATASET and logical paths for FILE
- CPI security material or ADF managed identity for lake writes