Chat now with support

Live-Hilfe anfordern
Registrierung abschließen

Anmelden

Preisinformationen anfragen

Vertrieb kontaktieren

Identity Manager 8.2.1 - Administration Guide for Connecting to SAP R/3

Inhaltsnavigation

Managing SAP R/3 environments

Architecture overview One Identity Manager users for managing SAP R/3

Setting up SAP R/3 synchronization

Users and authorizations for synchronizing with SAP R/3 Installing the One Identity Manager Business Application Programing Interface

Uninstalling BAPI transports

Setting up the synchronization server Creating a synchronization project for initial synchronization of an SAP client Special features of synchronizing with a CUA central system

Excluding a child system from synchronization

Displaying synchronization results Customizing the synchronization configuration

How to configure SAP R/3 synchronization Configuring synchronization of different clients Changing system connection settings of SAP clients

Editing connection parameters in the variable set Editing target system connection properties

Updating schemas Adding other schema types Creating a schema extension file

Defining tables Defining functions Defining schema types

Speeding up synchronization with revision filtering Restricting synchronization objects using user permissions Post-processing outstanding objects Configuring the provisioning of memberships Configuring single object synchronization Accelerating provisioning and single object synchronization Help for analyzing synchronization issues Disabling synchronization Synchronizing single objects Ignoring data error in synchronization

Basic data for managing an SAP R/3 environment

Setting up account definitions

Creating an account definition

Main data for an account definition

Creating manage levels

Main data for manage levels

Creating a formatting rule for IT operating data Collecting IT operating data Modify IT operating data Assigning account definitions to employees

Assigning account definitions to departments, cost centers, and locations Assigning account definitions to business roles Assigning account definitions to all employees Assigning account definitions directly to employees Assigning account definitions to system roles Adding account definitions to the IT Shop

Assigning account definitions to a target system Deleting an account definition

Editing a server

Main data for a Job server Specifying server functions

Target system managers

Basic data for user account administration

User account types External identifier types SAP parameters

Displaying main data of SAP parameters General main data of SAP parameters Assigning SAP parameters to departments, cost centers, and locations Assigning SAP parameters to business roles Editing parameter values for indirect SAP parameter assignment Inheritance of parameter values by SAP user accounts

Printers Cost centers Start menus Companies Login languages Security policies Communication types Licenses Special versions Password policies for SAP user accounts

Predefined password policies Using password policies Editing password policies

General main data of password policies Policy settings Character classes for passwords

Custom scripts for password requirements

Checking passwords with a script Generating passwords with a script

Password exclusion list Checking a password Testing password generation

Initial password for new SAP user accounts Email notifications about login data

SAP systems SAP clients

General main data of SAP clients Specifying categories for inheriting SAP groups, SAP roles, and SAP profiles Editing synchronization projects

SAP user accounts

Linking user accounts to employees Supported user account types Central user administration in One Identity Manager Entering main data of SAP user accounts

General main data of an SAP user account Workplace data for SAP user accounts SAP user account login data Phone numbers Fax numbers Email addresses Fixed values for an SAP user account Measurement data SNC data for an SAP user account

Directly assigning SAP parameters Additional tasks for managing SAP user accounts

Overview of SAP user accounts Changing the manage level of SAP user accounts Assigning SAP groups and SAP profiles directly to an SAP user account Assigning SAP roles directly to an SAP user account Assigning structural profiles Granting access to clients of a central user administration Assigning SAP licenses Locking and unlocking SAP user accounts Assigning extended properties Renaming SAP user accounts

Assigning employees automatically to SAP user accounts

Editing search criteria for automatic employee assignment

Automatically creating departments based on SAP user account information Locking SAP user accounts Deleting and restoring SAP user accounts Entering external user identifiers for an SAP user account

SAP groups, SAP roles, and SAP profiles

Editing main data of SAP groups, SAP roles, and SAP profiles

General main data of SAP groups General main data of SAP roles General main data of SAP profiles

Assigning SAP groups, SAP roles, and SAP profiles to SAP user accounts

Assigning SAP groups, SAP roles, and SAP profiles to organizations Assigning SAP groups, SAP roles, and SAP profiles to business roles Assigning SAP user accounts directly to SAP groups and SAP profiles Assigning SAP user accounts directly to SAP roles Adding SAP groups, SAP roles, and SAP profiles to system roles Adding SAP groups, SAP roles, and SAP profiles to the IT Shop Assignment and inheritance of SAP profiles and SAP roles to SAP user accounts Configuring single role assignment Inheriting SAP profiles and SAP roles in a central user administration

Additional tasks for managing SAP groups, SAP roles, and SAP profiles

Overview of SAP groups, SAP roles, and SAP profiles Effectiveness of SAP groups, SAP roles, and SAP profiles SAP group, SAP role, and SAP profile inheritance based on categories Assigning extended properties to SAP groups, SAP roles, and SAP profiles Showing SAP authorizations

Validity period of role assignments

Assigning the validity period of direct role assignments Configuring the validity period of indirect role assignments Determining the validity period of indirect role assignments

General main data of SAP products Assigning SAP products to employees

Assigning SAP products to organizations Assigning SAP products to business roles Assigning SAP products directly to employees Adding SAP products to system roles Adding SAP products to the IT Shop

Additional tasks for managing SAP products

Overview of SAP products Assigning SAP groups, SAP roles, and SAP profiles to an SAP product Assigning account definitions to SAP products Assigning subscribable reports to SAP products Assigning extended properties to SAP products Editing conflicting system roles

Providing system measurement data

Mapping the measurement data Entering licenses for SAP user accounts Finding licenses using SAP roles and SAP profiles

Determining an SAP user account rating Transferring calculated licenses Disabling license calculation

Reports about SAP objects

Overview of all assignments

Removing a Central User Administration

Release child systems Converting the central system Checking for successful conversion

Troubleshooting an SAP R/3 connection

Table accesses not performed correctly

Configuration parameters for managing an SAP R/3 environment Default project templates for synchronizing an SAP R/3 environment

Project template for client without CUA Project template for the CUA central system Project template for CUA subsystems

Referenced SAP R/3 table and BAPI calls Example of a schema extension file

Assigning SAP products to business roles

Installed modules:

Business Roles Module

You assign SAP products to business roles in order to assign them to user accounts over business roles.

To assign an SAP product to business roles

Select the SAP R/3 > Products category.
Select the SAP product in the result list.
Select the Assign business roles task.
In the Add assignments pane, assign business roles.
- OR -

In the Remove assignments pane, remove business roles.
Save the changes.

Related topics

Assigning SAP products directly to employees

You can assign SAP products directly to employees. All groups, roles, and profiles are assigned to this SAP product can be inherited by these employees.

To assign an SAP product directly to employees

Select the SAP R/3 > Products category.
Select the SAP product in the result list.
Select the Assign to employees task.
In the Add assignments pane, assign employees.
- OR -

In the Remove assignments pane, remove employees.
Save the changes.

Related topics

Adding SAP products to system roles

You can group individual SAP products into a package. To do this, you assign SAP products to system roles.

NOTE: SAP products with the Only use in IT Shop option enabled can only be assigned to system roles that also have this option set.

To assign an SAP product to system roles

Select the SAP R/3 > Products category.
Select the SAP product in the result list.
Select the Assign system roles task.
Select the System role contained in tab to assign parent system roles.
- In the Add assignments pane, assign system roles.
  - OR -
  
  In the Remove assignments pane, remove system roles.
Select the System role contains tab to assign child system roles.
- In the Add assignments pane, assign system roles.
  - OR -
  
  In the Remove assignments pane, remove system roles.
Save the changes.

Related topics

Adding SAP products to the IT Shop

Once an SAP product has been assigned to an IT Shop shelf, it can be requested by the shop customers. To ensure the SAP product is requestable, further prerequisites need to be guaranteed.

The SAPproduct must be labeled with the IT Shopoption.
The SAP product must be assigned to a service item.
The SAP product must be also labeled with Only use in IT Shop if the SAP product can only be assigned to employees using IT Shop requests. Then, the SAP product may no longer be assigned directly to hierarchical roles.

To add an SAP product to the IT Shop

Select the SAP R/3 > Products category.
Select the SAP product in the result list.
Select the Add to IT Shop task.
In the Add assignments pane, add the SAP product to the IT Shop shelves.
Save the changes.

To remove an SAP product from individual IT Shop shelves

Select the SAP R/3 > Products category.
Select the SAP product in the result list.
Select Add to IT Shop.
In the Remove assignments pane, remove the SAP product from the IT Shop shelves.
Save the changes.

To remove an SAP product from all IT Shop shelves

Select the SAP R/3 > Products category.
Select the SAP product in the result list.
Select the Remove from all shelves (IT Shop) task.
Confirm the security prompt with Yes.
Click OK.

The SAP product is removed from all shelves by One Identity Manager Service. All requests and assignment requests are canceled along with the SAP product as a result.

For more information about providing products in the IT Shop, see the One Identity Manager IT Shop Administration Guide.

Related topics

Verwandte Dokumente

The document was helpful.

Bewertung auswählen

I easily found the information I needed.

Bewertung auswählen

© 2024 One Identity LLC. ALL RIGHTS RESERVED. Nutzungsbedingungen Datenschutz Cookie Preference Center