Assigning account definitions to SAP products
Use this task to add account definitions to an SAP product. If you assign the SAP product to employees, the account definitions contained in the SAP product are inherited by the employees.
NOTE: Account definitions roles with Only use in IT Shop set can only be assigned to SAP products that also have this option set.
To assign account definition to an SAP product
- Select the SAP R/3 | Products category.
- Select the SAP product in the result list.
- Select the Assign account definitions task.
- In the Add assignments pane, assign account definitions.
- OR -
In the Remove assignments pane, remove the account definitions.
- Save the changes.
Detailed information about this topic
Assigning subscribable reports to SAP products
| Installed modules: |
Report Subscription Module |
Use this task to add subscribable reports to an SAP product. If you assign the SAP product to employees, the subscribable reports contained in the SAP product are inherited by the employees.
NOTE: Subscribable reports with Only use in IT Shop set can only be assigned to SAP products that also have this option set.
To assign subscribable reports to an SAP product
- Select the SAP R/3 | Products category.
- Select the SAP product in the result list.
- Select the Assign subscribable reports task.
- In the Add assignments pane, assign subscribable reports.
- OR -
In the Remove assignments pane, remove the subscribable reports.
- Save the changes.
Detailed information about this topic
- One Identity Manager Report Subscriptions Administration Guide
Assigning extended properties to SAP products
Extended properties are meta objects, such as operating codes, cost codes, or cost accounting areas that cannot be mapped directly in One Identity Manager.
To specify extended properties for an SAP product
- Select the SAP R/3 | Products category.
- Select the SAP product in the result list.
- Select the Assign extended properties task.
- In the Add assignments pane, assign extended properties.
- OR -
In the Remove assignments pane, remove extended properties.
- Save the changes.
Related topics
Editing conflicting system roles
Table 73: Configuration parameters for editing mutually exclusive roles
| QER | Structures | Inherite | ESetExclusion |
Preprocessor-relevant configuration parameter for defining the effectiveness of system roles If this parameter is set, mutually excluding system roles can be defined. Changes to this parameter require the database to be recompiled. |
It is possible that employees may not own certain groups, roles, and profiles at the same time. To avoid this, you can assign mutually exclusive groups, roles, and profiles to different SAP products. Define these SAP products afterward as conflicting system roles. This means that conflicting system roles can be grouped together into a system role.
NOTE: Only SAP products, which are defined directly as conflicting system roles cannot be assigned to the same employee. Definitions made on parent or child SAP products do not affect the assignment.
To implement conflicting system roles
- In the Designer, set the "QER | Structures | Inherite | ESetExclusion" configuration parameter and compile the database.
To define conflicting system roles
- Select the SAP R/3 | Products category.
- Select the SAP product in the result list for which you want to define conflicting system roles.
- Select the Edit conflicting system roles task.
- In the Add assignments pane, double-click on the system roles to exclude them from the selected SAP product.
- OR -
In the Remove assignments pane, double-click on the system roles that are no longer mutually exclusive.
- Save the changes.
