Independent SAP advisory. Not an SAP partner, reseller, or affiliate.
SAP License Consulting

SAP License for Portal Users: The Employee and Customer Self Service Population

SAP portal users include the employees on the corporate intranet, the suppliers on the procurement portal, and the customers on the service portal. The license type assignment, the platform user versus named user distinction, the indirect access boundary, and the customer operating model that produces the defensible portal user position during the SAP measurement.

SAPAudits Research May 19, 2026 10 minute read
SAP portal administrator and identity governance analyst reviewing portal user registration and license type assignment on workstation during audit prep
In this article
  1. Why portal users carry distinct license rules
  2. The platform user license type
  3. The indirect access boundary for portal users
  4. The portal user registration and the license assignment workflow
  5. The defensible portal user program

Why portal users carry distinct license rules

Portal users access SAP through a presentation layer that aggregates services from multiple back end systems. The portal user may be an employee, a supplier, or a customer. The license rules differ by user category. The employee on the corporate portal carries the employee self service license. The supplier on the procurement portal sits in the indirect access category. The customer on the service portal sits in the customer self service category. The customer that runs a portal needs the category map before the SAP measurement lands. Reference the license audit pillar, the named user types analysis, and the employee self service license analysis.

The platform user license type

The platform user license type covers users who interact with the SAP NetWeaver platform without directly transacting against the SAP business suite. The platform user typically authenticates through the portal, reads content, runs lightweight searches, and submits self service requests. The platform user license is significantly cheaper than the named user license. The customer that maps portal user behavior against the platform user definition typically qualifies a large population for the lighter license. The boundary between platform user and named user requires careful documentation. Reference the professional versus limited analysis, the licensing models analysis, and the license reclassification analysis.

The indirect access boundary for portal users

Portal users that access SAP through a portal application that itself calls SAP back end services sit in the indirect access scope. The supplier that creates a purchase order through the procurement portal generates a document that the SAP system persists. The document count drives the digital access metric. The customer that runs a portal for indirect access populations needs the integration map that records the document flows from the portal into the SAP back end. Reference the indirect access explained, the indirect access detection analysis, and the digital access pricing analysis.

Customer programs that combine the portal inventory with the platform user qualification register and a quarterly measurement reconciliation reduce portal user license cost by 28 percent and produce the defensible portal position that closes the platform user finding during the SAP audit.

The portal user registration and the license assignment workflow

Each portal user registration triggers a license assignment workflow. The workflow categorizes the user as employee, supplier, or customer. The workflow assigns the license type based on the category and the portal application set. The workflow records the assignment in the central license register. The workflow notifies the license management team for review. The customer that runs the workflow controls the portal license posture from the registration event forward. The customer that adds portal users ad hoc loses control of the license posture within a few hundred users. Reference the license governance analysis, the license keys analysis, and the license harvesting analysis.

The defensible portal user program

The defensible portal user program has four components. The portal inventory that lists each portal, the user category, and the license type. The platform user qualification register that documents the behavior support for the platform user assignment. The indirect access integration map for supplier and customer portals. The measurement reconciliation that maps the portal roster against the LAW measurement output. The four components produce the portal user position that defends the SAP audit and supports the renewal negotiation. Reference the compliance framework pillar (cross cluster), the security audit pillar (cross cluster), and the renewal negotiation expertise.

Key takeaway

Practical posture for SAP portal user licensing

For the broader context, our license audit complete guide and compliance framework pillar (cross cluster reference) document the response posture and the regulatory map that govern SAP risk. The audit defense expertise page documents the senior advisor methodology, and the license optimization expertise page documents the cost reduction approach. Confidential consultation is available through the contact form.

Related white paper

SAP Named User License Types

The reference guide to named user license types including the portal and self service user variants.

Access the paper
SR
SAPAudits Research
Senior practitioners, sap license consulting

The SAPAudits research team includes senior advisors with combined experience supporting more than 500 enterprise SAP engagements. We do not hold any commercial relationship with SAP.

Independent SAP advisory

Facing a similar SAP situation?

Talk to a senior advisor. We respond within 24 hours. No fee, no obligation, no SAP commercial relationship.

Schedule a confidential consultation