# Ansible automation for SAP - Issue and Best practices **URL:** \ **Category:** Ansible Project\ **Created:** [October 26, 2020, 6:38am UTC](https://forum.ansible.com/t/ansible-automation-for-sap-issue-and-best-practices/34105 "2020-10-26T06:38:08Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![Pratheek\_P](https://avatars.discourse-cdn.com/v4/letter/p/fbc32d/32.png) [@Pratheek\_P](https://forum.ansible.com/u/Pratheek_P)\ **Post date:** [October 26, 2020, 6:38am UTC](https://forum.ansible.com/t/ansible-automation-for-sap-issue-and-best-practices/34105/1 "2020-10-26T06:38:08Z")
Dear Ansible community, I want to try out Ansible automation for SAP where we automate SAP start/stop, Oracle DB start/stop processes. I’m able to achieve this by creating playbooks, using become method to change user and establishing open SSH connection from root of Ansible control node to root of SAP managed host. Now I have a new requirement to use a non-root user in control node and managed host. However, I noticed that when I use the non-root user, I’m not able to get the correct environment variables required to start/stop SAP as adm user. I want to know what is the best way to achieve this and also about the best practices when it comes to automating SAP tasks using Ansible. Looking forward to your replies. Best Regards, Pratheek. P ---
**Author:** ![Pratheek\_P](https://avatars.discourse-cdn.com/v4/letter/p/fbc32d/32.png) [@Pratheek\_P](https://forum.ansible.com/u/Pratheek_P)\ **Post date:** [October 28, 2020, 8:52am UTC](https://forum.ansible.com/t/ansible-automation-for-sap-issue-and-best-practices/34105/2 "2020-10-28T08:52:51Z")
Any updates on this please? Best Regards, Pratheek. P ---
**Author:** ![Dick\_Visser](https://avatars.discourse-cdn.com/v4/letter/d/d9b06d/32.png) [@Dick\_Visser](https://forum.ansible.com/u/Dick_Visser)\ **Post date:** [October 28, 2020, 9:43am UTC](https://forum.ansible.com/t/ansible-automation-for-sap-issue-and-best-practices/34105/3 "2020-10-28T09:43:25Z")
[https://docs.ansible.com/ansible/latest/user\_guide/playbooks\_environment.html](https://docs.ansible.com/ansible/latest/user_guide/playbooks_environment.html) ---
**Author:** ![Pratheek\_P](https://avatars.discourse-cdn.com/v4/letter/p/fbc32d/32.png) [@Pratheek\_P](https://forum.ansible.com/u/Pratheek_P)\ **Post date:** [November 4, 2020, 10:44am UTC](https://forum.ansible.com/t/ansible-automation-for-sap-issue-and-best-practices/34105/4 "2020-11-04T10:44:19Z")
Thank you. Is there a way we can use non-root user and carry out administrative tasks in Ansible system? Also, what are the best practices for using Ansible in SAP? ---
**Author:** ![Dick\_Visser](https://avatars.discourse-cdn.com/v4/letter/d/d9b06d/32.png) [@Dick\_Visser](https://forum.ansible.com/u/Dick_Visser)\ **Post date:** [November 4, 2020, 4:24pm UTC](https://forum.ansible.com/t/ansible-automation-for-sap-issue-and-best-practices/34105/5 "2020-11-04T16:24:41Z")
> Thank you. Is there a way we can use non-root user and carry out administrative tasks in Ansible system? Not sure what you mean. Very generally speaking one should not be able to do administrative tasks as a non-root user. What do you mean by "Ansible system"? The controller node? Or the managed node(s)? You should not run ansible (playbooks) as root on the controller node, as this is both not needed and insecure. As for the managed nodes, it depends on the "administrative tasks" you want to carry out. Do they need privilege escalation (i.e. sudo etc)? > Also, what are the best practices for using Ansible in SAP? Ansible is "just" an automation tool, so this question basically translates to "what are the best practices for administrating SAP?". I don't know the answer to that, but given that SAP is commercial software, that usually comes with documentation and support. That would be the place where I would look. Dick ---
**Author:** ![Pratheek\_P](https://avatars.discourse-cdn.com/v4/letter/p/fbc32d/32.png) [@Pratheek\_P](https://forum.ansible.com/u/Pratheek_P)\ **Post date:** [November 5, 2020, 11:32am UTC](https://forum.ansible.com/t/ansible-automation-for-sap-issue-and-best-practices/34105/6 "2020-11-05T11:32:14Z")
Thank you for your response. What are the different use cases of Ansible in automating SAP related tasks? For example, I have automated the task of upgrading the SAP kernel using Ansible. The upgrade of SAP kernel involves starting, stopping SAP application from the command line and extracting a few packages, changing ownerships etc. These tasks are easily managed with the help of Ansible now. Thanks & Regards, Pratheek. P