Now accepting guest editorial from SAP, Oracle, Workday and ServiceNow practitioners.Pitch a guide
The Sign-Off Table

Lesson 2 of 5

Multitenant containers: system and tenant databases

11 min

Listen to this lesson

0:00 / 6:15

When people say "the HANA database of CMQ", they usually mean one specific thing: a tenant database inside an SAP HANA system. Since SAP HANA 2.0 SPS 01, every SAP HANA system is installed in multiple-container mode. Knowing the difference between the system and its databases avoids confusion in incidents, backup discussions and refresh plans.

SAP HANA systemOne installation with its own SID and instance number: shared software, hosts and administration
System database (SYSTEMDB)Exactly one per system: central administration, landscape information, system-wide configuration and monitoring
Tenant databasesZero or more: each self-contained, with its own users, catalog, persistence, backups and traces
Schemas and tablesLive inside a tenant; the SAP S/4HANA ABAP system reads and writes its tables in its tenant
The layers of a multitenant SAP HANA system.
The Sign-Off Table · thesignofftable.com/academy/sap-bas-102

The system database

The system database exists exactly once per SAP HANA system. It keeps landscape information (which tenants exist and where they run), holds system-wide configuration and provides system-wide monitoring. It runs the name server. It is not where business data lives: it does not support full SQL, cannot scale out, and can see monitoring data from tenants but not their content. Administrators connect to it to create, start, stop, rename and drop tenants, which requires the system privilege DATABASE ADMIN.

Creating a tenant is a system database task: an administrator with DATABASE ADMIN connects to SYSTEMDB, which registers and starts the new tenant's own index server.
The Sign-Off Table · thesignofftable.com/academy/sap-bas-102

Tenant databases

A tenant database is a full database: it has its own index server that stores and persists its data, its own users and catalog, its own parameter settings, and its own backups. Tenants are isolated from each other by default; users of one tenant cannot connect to another unless cross-database access is explicitly enabled. All tenants of a system share the same SAP HANA software version and the same high-availability and disaster-recovery setup, so patching the SAP HANA system patches every tenant at once.

QuestionSystem databaseTenant database
How many?Exactly oneZero or more (SAP training cites a default limit of 20 additional tenants per instance)
Holds business data?NoYes: the SAP S/4HANA tables live here
Full SQL?NoYes
BackupsOwn backup catalogOwn backup catalog; can be backed up and recovered on its own
Typical admin taskCreate, start, stop or drop tenants; system-wide settingsUsers, schemas, tenant parameters, tenant backups
System database and tenant database side by side.
The Sign-Off Table · thesignofftable.com/academy/sap-bas-102

Isolation can be tightened. By default all database processes run under the operating-system user <sid>adm. In high isolation mode, each tenant's processes run under their own operating-system user and group, so even <sid>adm cannot read a tenant's data volumes, log volumes or backups. Whether a platform needs that depends on how many parties share it.

How it looks in an SAP S/4HANA landscape

An SAP S/4HANA ABAP system connects to one tenant database. A common pattern is one SAP HANA system per SAP system, with a single tenant whose name matches the ABAP SID, but other layouts exist, so always check your own landscape documentation rather than assuming. Ports follow the instance number: SAP's training material gives 3<nn>13 as the SQL port of the system database and 3<nn>15 as the SQL port of the initial tenant, where <nn> is the SAP HANA instance number.

A common SAP S/4HANA layout: the ABAP system connects to one tenant, and SQL ports follow the SAP HANA instance number nn.
The Sign-Off Table · thesignofftable.com/academy/sap-bas-102
One tenant, high isolationStrict separation required even for one tenant, for example regulated data handled by separate teams
Several tenants, high isolationShared hardware for different owners; separate OS users protect each tenant's files
One tenant per system (common for SAP S/4HANA)Simple to operate; backups, refreshes and patches affect one application
Several tenants, default isolationConsolidated non-production databases run by one team; watch shared memory and CPU
Common tenant layouts. Contoso's CMD, CMQ and CMP each use one SAP HANA system with one tenant (bottom-left).
The Sign-Off Table · thesignofftable.com/academy/sap-bas-102

Versions: SPS and revisions

Because all tenants share one software version, it pays to know how that version is named. SAP HANA 2.0 ships as support package stacks (SPS) with numbered revisions inside each stack, written like 2.00.08x. SPS08 reached customers in November 2024, and SAP S/4HANA 2025 requires an SPS08 revision at or above the minimum named in its release information note and the Product Availability Matrix. SAP's revision and maintenance strategy (SAP Note 2378962) moved, from SPS08, to a new stack roughly every two years with a longer maintenance period per stack, so most change during the life of Contoso's systems comes as SPS08 revisions. The SAP HANA cockpit and the M_DATABASE view show the running version. Treat every revision change as a regression trigger, update CMQ before CMP, and confirm the revision is listed for your SAP S/4HANA release before anyone schedules it.

What would you do?

A vendor running a performance test asks Sam for "the HANA admin password for CMQ" so they can read table sizes. What should Sam do?

Key points
  • Every SAP HANA 2.0 system (since SPS 01) has one system database and zero or more tenant databases.
  • The system database administers the system; business data lives in tenants.
  • Each tenant has its own users, catalog, persistence and backups, but shares software version and hardware.
  • Create, rename and drop tenants from the system database with the DATABASE ADMIN privilege.

Check your understanding · not graded

Lesson check

  1. 1. How many system databases does a multitenant SAP HANA system have?

  2. 2. Where do the SAP S/4HANA business tables live?

  3. 3. Which privilege is needed to create a tenant database?

  4. 4. What do all tenants of one SAP HANA system share?