Assigning extended properties to BI user accounts
Extended properties are meta objects, such as operating codes, cost codes, or cost accounting areas that cannot be mapped directly in One Identity Manager.
To specify extended properties for a BI user account
- In the Manager, select the SAP R/3 > BI user accounts category.
- Select the BI user account in the result list.
- Select Assign extended properties.
-
In the Add assignments pane, assign extended properties.
TIP: In the Remove assignments pane, you can remove assigned extended properties.
To remove an assignment
- Save the changes.
For more information about setting up extended properties, see the One Identity Manager Identity Management Base Module Administration Guide.
Reports about BI analysis authorizations
One Identity Manager makes various reports available containing information about the selected base object and its relations to other One Identity Manager database objects. The following reports are available for BI analysis authorizations.
NOTE: Other sections may be available depending on the which modules are installed.
Table 6: Data quality target system report
|
Show overview |
BI user account |
This report shows an overview of the user account and the assigned permissions. |
|
Show overview including origin |
BI user account |
This report shows an overview of the user account and origin of the assigned permissions. |
|
Show overview including history |
BI user account |
This report shows an overview of the user accounts including its history.
Select the end date for displaying the history (Min. date). Older changes and assignments that were removed before this date, are not shown in the report. |
|
Overview of all assignments |
BI analysis authorization |
This report finds all roles containing identities who have the selected system entitlement. |
|
Show overview |
BI analysis authorization |
This report shows an overview of the system entitlement and its assignments. |
|
Show overview including origin |
BI analysis authorization |
This report shows an overview of the system entitlement and origin of the assigned user accounts. |
|
Show overview including history |
BI analysis authorization |
This report shows an overview of the system entitlement and including its history.
Select the end date for displaying the history (Min. date). Older changes and assignments that were removed before this date, are not shown in the report. |
Configuration parameters for the SAP R/3 Analysis Authorizations Add-on Module
The following configuration parameters are additionally available in One Identity Manager after the module has been installed.
Table 7: Configuration parameters for the module
| TargetSystem | SAPR3 | HRProfile |
Preprocessor relevant configuration parameter for controlling module components for BI analysis authorization administration in SAP R/3. If the parameter is set, BI analysis authorizations can be managed by One Identity Manager. Changes to this parameter require the database to be recompiled.
If you disable the configuration parameter at a later date, model components and scripts that are no longer required, are disabled. SQL procedures and triggers are still carried out. For more information about the behavior of preprocessor relevant configuration parameters and conditional compiling, see the One Identity Manager Configuration Guide. |
Default project template for the SAP R/3 Analysis Authorizations Add-on Module
A default project template ensures that all required information is added in One Identity Manager. This includes mappings, workflows, and the synchronization base object. If you do not use a default project template you must declare the synchronization base object in One Identity Manager yourself.
Use a default project template for initially setting up the synchronization project. For custom implementations, you can extend the synchronization project with the Synchronization Editor.
The project template uses mappings for the following schema types.
Table 8: Mapping SAP R/3 schema types to tables in the One Identity Manager schema
| SAPBWP |
SAPBWP |
| BWUserInBWP |
SAPBWUserInSAPBWP |
.