Applying used variables
Variables used in SAP functions can be transferred to variable sets.
To transfer variables to a variable set
- Select the Identity Audit | SAP Functions | Variable sets category.
- Select the variable set in the result list.
-
Select the Change master data task.
- Select the Apply chosen variables... task.
- Mark all function definitions or working copies from which you want to copy the variables into the variable set.
Multi-select is possible.
- Click OK to transfer the variables.
All variable from the selected function definitions are add to the list of field variables.
- Edit the variables.
- Save the changes.
Plugins for SAP functions
There are two plugins available for SAP functions. Run the selected plugin from the Plugins menu on the menu bar. You can use the plugins to swap existing SAP functions in the One Identity Manager database between different One Identity Manager databases.
Exporting function definitions
To export all function definitions to a CSV file
- Select the Identity Audit category.
- Select the Plugins | Export all SAP function definitions menu item.
- Click Yes to export only working copies.
- OR -
Click No to export only enabled SAP functions.
- Specify the file name and storage location for the CSV file.
- Click Save.
All function definitions are written to file in sequence.
The following properties are exported:
Table 26: Exported master data for a function definition
| Name of the function definition |
Function |
| Assigned function category |
Process |
| Description |
Function Description |
| Significance |
Risk Level |
| Transactions |
Transaction |
| Authorization objects |
Object |
| Authorization fields |
Field |
| Description of authorization field. |
Field Description |
| Value/lower scope boundary |
Value From |
| Upper scope boundary |
Value To |
The import status (State) is included with each data record in the CSV file as additional information. The import status is set to "1" by default on export. This data is evaluated when function definitions are imported.
NOTE: SAP function supervisors can only export those function definitions for which they are responsible, as entered in the master data.
Related topics
Importing function definitions
A plugin is available to import SAP functions from an existing CSV file. The functions definitions contained in the CSV file are transferred to the database as working copies. The following data fields must be in the CSV file so that function definitions can be imported.
Table 27: Data fields for importing function definitions
| Compulsory fields: |
| Function |
Function definition |
| Transaction |
Transaction |
| Object |
Authorization objects |
| Field |
Authorization field |
| Value From |
Value/lower scope boundary |
| Value To |
Upper scope boundary |
| State |
No equivalent
The import status controls which data records are imported into One Identity Manager.
1 ... import |
| Optional fields: |
| Process |
Category |
| Function Description |
Description of the function definition. |
| Risk Level |
Significance
Possible values are {Low|Medium|High|Critical}. |
| Field Description |
Describes the authorization fields, authorization objects and transactions. |
NOTE: The order of the data fields is arbitrary. Ensure that all required data fields are defined in the header and exist in the data sets. Mark data fields without values with two sequential delimiters. Data sets with empty mandatory fields are not imported.
To import function definitions
- Select the Identity Audit category.
- Select the Plugins | Import SAP function definitions... menu.
- Select the CSV file to import. Click Open.
-
Confirm the security prompt with Yes.
The functions definitions are transferred to the database as working copies. If there is already a working copy with the same name in the database, it is overwritten by the import.
