Granting access to clients of a central user administration
User accounts, administered through central user administration (), have control over access permissions in several clients. You specify the client in which each user account obtains its access permissions. Clients can be assigned directly and indirectly. For indirect assignments, create account definitions for the clients and assign these to hierarchical roles. For more information, see Central user administration in One Identity Manager.
To react quickly to special requests, you can assign the clients directly to a user account. To do this, select the central system and the child system. Only SAP roles or profiles from this client can be assigned to a user account.
This task is only available if the client of the selected user account is labeled as central system.
To assign a user account directly to a client
- Select the SAP R/3 > User accounts category.
- Select the user account in the result list.
- Select the Assign access to clients task.
To assign a client
-
Click Add.
This inserts a new row in the table.
-
From the Client menu, select the client in which you want the user account to receive access permissions.
-
Assign an account definition, if necessary.
-
Assign more clients, if necessary.
- Save the changes.
To edit an assignment
-
In the table, select the assignment that you want to edit. Edit the account definition's assignment.
- Save the changes.
To remove an assignment
-
In the table, select the assignment that you want to remove.
-
Click Delete.
- Save the changes.
Assigning SAP licenses
NOTE: This task is only available for user account managed through .
SAP licenses in child system and in the central system can be assigned to user account for system measurement. For more information, see Providing system measurement data.
To assign licenses to a user account
-
In the Manager, select the SAP R/3 > User accounts category.
-
Select the user account in the result list.
-
Select the Assign SAP licenses in client systems task.
-
Click Add.
This inserts a new row in the table.
-
Mark this row. Enter the measurement data.
- Save the changes.
To edit a license assignment
-
In the Manager, select the SAP R/3 > User accounts category.
-
Select the user account in the result list.
-
Select the Assign SAP licenses in client systems task.
-
Select an assignment in the table.
- Edit the measurement data.
- Save the changes.
To remove a license assignment
-
In the Manager, select the SAP R/3 > User accounts category.
-
Select the user account in the result list.
-
Select the Assign SAP licenses in client systems task.
-
Select an assignment in the table.
- Click Delete.
- Save the changes.
The following license information is displayed on the form.
Table 49: Measurement data for a centrally administrated user account
|
Recipient client |
Client containing the user account which is assigned a license. You can select the central system or a assigned child system. |
|
License |
User account license in the selected client. |
|
License extension |
License extension for the installed special version. Select the special version ID from the menu. |
|
Country surcharge |
Additional license fee. |
|
Chargeable system |
SAP system containing the client to be charged. This field is only shown if 04 (substitute) or 11 (Multi-client/system) is entered as the license. |
|
Chargeable client |
Client containing the user account to be charged. This field is only shown if 04 (substitute) or 11 (Multi-client/system) is entered as the license. |
|
Chargeable user account |
User account to be charged if 04 (substitute) or 11 (Multi-client/system) is entered as the license. |
|
Substituted from |
Time period in which another user account assumes responsibility. These fields are enabled if 04 (substitute) is entered as the license. |
|
Substituted until |
Related topics
Locking and unlocking SAP user accounts
The way that user accounts are managed determines how you lock them. User accounts that are not linked to an employee, can be locked with the Lock user account task.
To lock a user account
- In the Manager, select the SAP R/3 > User accounts category.
- Select the user account in the result list.
- Select the Lock SAP user account task.
- Confirm the prompt with OK.
This generates a process that publishes the change in the target system. The User account locked option is enabled as soon as the process is successfully completed.
If the user account is linked to an employee, the user account is unlocked when a new central password is set for the employee. This behavior is controlled by the TargetSystem | SAPR3 | Accounts | UnlockByCentralPassword configuration parameter. For detailed information about an employee’s central password, see One Identity Manager Identity Management Base Module Administration Guide.
To unlock a user account manually
- In the Manager, select the SAP R/3 > User accounts category.
- Select the SAP user account in the result list.
- Select the Unlock SAP user account task.
- Confirm the prompt with OK.
This generates a process that publishes the change in the target system. The User account locked option is disabled as soon as the process is successfully completed.
Detailed information about this topic
Assigning extended properties
Extended properties are meta objects, such as operating codes, cost codes, or cost accounting areas that cannot be mapped directly in One Identity Manager.
To specify extended properties for a user account
- Select the SAP R/3 > User accounts category.
- Select the user account in the result list.
- Select the Assign extended properties task.
- Assign extended properties in Add assignments.
- OR -
Remove extended properties in Remove assignments .
- Save the changes.
Detailed information about this topic
- One Identity Manager Identity Management Base Module Administration Guide
