SAP products can be assigned directly or indirectly to identities. In the case of indirect assignment, identities and SAP products are arranged in hierarchical roles. The number of SAP products assigned to an identity is calculated from the position in the hierarchy and the direction of inheritance.
If you add an identity to roles and that identity owns a user account, the user account is added to all groups, roles, or profiles included in the SAP products owned by the identity. The groups, roles, or profiles are not inherited if the SAP product is disabled or if the share date is still in the future.
Furthermore, SAP products can be assigned to identities through IT Shop requests. SAP products can be assigned through IT Shop requests by adding identities to a shop as customers. All SAP products are assigned to this shop can be requested by the customers. Requested SAP products are assigned to the identities after approval is granted.
Prerequisites for indirect assignment of SAP groups, roles, and profiles through SAP products to user accounts are:
- Assignment of system roles, identities, groups, roles, and profiles is permitted for role classes (departments, cost centers, locations, or business roles).
- The user accounts are labeled with the Groups can be inherited, Profiles can be inherited, and Roles can be inherited options.
- The user accounts, groups, roles, and profiles belong to the same SAP client.
For more information see the following guides:
Topic |
Guide |
---|---|
Basic principles for assigning and inheriting company resources |
One Identity Manager Identity Management Base Module Administration Guide One Identity Manager Business Roles Administration Guide |
Assigning company resources through IT Shop requests |
One Identity Manager IT Shop Administration Guide |
System roles |
One Identity Manager System Roles Administration Guide |
Detailed information about this topic
- Assigning SAP products to organizations
- Assigning SAP products to business roles
- Assigning SAP products directly to identities
- Adding SAP products to system roles
- Adding SAP products to the IT Shop