Decision Framework
Comparison
Licensing
Architecture

Extension Decision Framework

A practical guide for choosing the right extension pattern — comparing On-Premise, Private Cloud, and Public Cloud extensibility models, with a complete licensing matrix for extension-related BTP services.

Extension Decision Flowchart

Extension Method Decision Flow
Rendering diagram…

Executive Summary

Choosing the wrong extension pattern is the most common mistake in S/4HANA projects. Tier 2 extensions (in-system) are faster to implement for simple requirements but add system complexity. Tier 3 extensions (side-by-side on BTP) are more decoupled but require BTP infrastructure costs and team skills. The decision framework above provides a structured approach to make the right choice every time.

On-Premise vs Private Cloud vs Public Cloud

DimensionOn-PremisePCE (RISE)Public Cloud
ABAP developer access✅ Full✅ ABAP Cloud only❌ Not available
Key User tools
Custom BAdI implementation✅ ABAP Cloud only⚠️ Limited via Key User
RAP custom BOs❌ Use standard CBOs
SAP modifications⚠️ Possible (strongly discouraged)❌ Forbidden❌ Not possible
Clean Core mandatory⚠️ Recommended✅ Contractual✅ Enforced
Upgrade cadence~2 years (customer managed)Annual (SAP-managed)Quarterly (automatic)
Upgrade effort (clean)4-8 weeks2-4 weeksNear-zero
BTP connectivityCloud ConnectorPrivate Link (recommended)Communication Arrangement
Cloud ALMOptional (recommended)MandatoryMandatory
Side-by-side CAP
SAP Build Apps
Integration Suite
Data sovereigntyFull customer controlCustomer region on hyperscalerSAP-defined regions
UAE data residency✅ Customer DC in UAE✅ AWS ae1 possible⚠️ Limited
Infra managed byCustomerSAPSAP
License modelPerpetual + maintenanceRISE subscriptionRISE subscription
Cost modelCapEx + OpExOpEx (subscription)OpEx (subscription, lower entry)

Extension Licensing Matrix — BTP Services

ServiceRequired ForPAYGCPEASubscriptionTypical Cost
Cloud Foundry RuntimeCAP side-by-side (OP/PCE)CPEA-included
Kyma RuntimeContainer-based extensionsCPEA credits
SAP HANA CloudCAP extension data storage~$1K/month/30GB
Connectivity ServiceOn-premise via Cloud Connector✅ (free)✅ (free)Free
Destination ServiceConnection config✅ (free)✅ (free)Free
Private LinkPCE Private Link connectivity~$200/month
XSUAAApp authentication✅ (free)✅ (free)Free
SAP Build AppsLow-code front-ends✅ trial✅ per user~$50/user/month
Build Process AutomationWorkflow extensionsCPEA credits
Integration SuiteA2A / B2B integrations✅ enterprise~$50K/year enterprise
SAP BASABAP Cloud + CAP development✅ (free tier)Free tier sufficient
Cloud ALMChange management (mandatory RISE)✅ includedIncluded with RISE

Extension Pattern Quick-Reference

Business RequirementRecommended PatternTierDeployment
Add a field to a standard documentCustom Field (F1481)Tier 2S/4HANA
Validate field values on saveCustom Field → Logic tabTier 2S/4HANA
Route approval based on amountBusiness RuleTier 2S/4HANA
Create a new simple transactional objectCustom Business Object (F1731)Tier 2S/4HANA
Inject pricing logicReleased BAdI (SD_COND_ACCESS)Tier 2S/4HANA
Build new OData V4 serviceRAP Business ObjectTier 2S/4HANA
Complex app with own databaseCAP + HANA CloudTier 3BTP
Low-code mobile/web front-endSAP Build AppsTier 3BTP
Process workflow with approvalsBuild Process AutomationTier 3BTP
Integration with external systemIntegration Suite iFlowTier 3BTP
AI-powered featureCAP + AI Core + Gen AI HubTier 3BTP
Multi-system mashup (S4+Ariba+SF)CAP + Integration SuiteTier 3BTP

Red Flags — When NOT to Build

Stop Before You Start
Before any extension design, validate that the requirement is actually an extension and not a configuration task, a standard SAP process, or a retired legacy need.
If the requirement exists in standard SAP — it is a configuration task, not an extension
If it requires modifying SAP standard code — escalate to SAP Product Management for a standard enhancement request
If it can be solved by SAP Build Apps in 2 days — do not build a full CAP application
If the requirement is "replicate this legacy Z-program from ECC" — re-evaluate whether the program is still needed at all

Enterprise Example — DEWA Extension Decision Register (June 2025)

Extension decisions made (YTD)
47
Resolved by Key User tools
19 (Custom Fields, CBOs, Rules)
Resolved by released BAdIs
14
Resolved by CAP side-by-side (BTP)
11
Rejected — standard SAP covers this
3
SAP standard modifications
0

Best Practices

Run the framework before every extension design review

The decision framework should be a mandatory agenda item in every extension design review meeting — not an afterthought.

Document every decision in Cloud ALM

Record the chosen tier and justification in Cloud ALM for every extension. Creates an auditable extension register.

Involve a Clean Core architect in all Tier 3 decisions

Tier 3 BTP extensions carry infrastructure costs and architectural complexity. Senior oversight prevents over-engineering.

Re-evaluate Tier 3 extensions annually

SAP continuously adds standard functionality. An extension built 18 months ago may now be replaceable with a standard feature.

Benchmark: >60% Tier 3 means training gap

If more than 60% of your extensions are Tier 3 (BTP), investigate whether Key User training is the real investment needed.

Common Pitfalls

Tier 3 for requirements that fit a Key User tool
Over-engineering is the most common mistake. A Custom Field + Business Rule solves 40% of typical extension requirements with zero BTP cost.
Tier 2 BAdI when the requirement needs own database
Under-engineering is the opposite problem. If the extension needs persistent data outside S/4HANA's tables, Tier 3 (CAP + HANA Cloud) is the right choice.
Not considering BTP service costs in design
HANA Cloud at ~$1K/month per 30GB adds up across many extensions. Cost modelling should happen at design time, not at budget review.
Extension decisions without a Clean Core architect
Junior teams default to "CAP for everything." Without senior oversight, 80% of extensions end up as Tier 3 regardless of complexity.

Security Considerations

Tier Determines Security Model
Extension tier has direct security implications. Tier 2 inherits S/4HANA's authorisation model. Tier 3 (BTP) requires independent XSUAA security design.
Document security model for each extension in the Extension Decision Register
Conduct security review for all Tier 3 extensions before production go-live
Tier 2 BAdI implementations must respect existing AUTHORITY-CHECK logic — never bypass