지금 지원 담당자와 채팅
지원 담당자와 채팅

Identity Manager 8.2.1 - Administration Guide for Connecting to SAP R/3

Managing SAP R/3 environments Setting up SAP R/3 synchronization Basic data for managing an SAP R/3 environment Basic data for user account administration SAP systems SAP clients SAP user accounts SAP groups, SAP roles, and SAP profiles SAP products Providing system measurement data Reports about SAP objects Removing a Central User Administration Troubleshooting an SAP R/3 connection Configuration parameters for managing an SAP R/3 environment Default project templates for synchronizing an SAP R/3 environment Referenced SAP R/3 table and BAPI calls Example of a schema extension file

Granting access to clients of a central user administration

User accounts, administered through central user administration (CUAClosed), have control over access permissions in several clients. You specify the client in which each user account obtains its access permissions. Clients can be assigned directly and indirectly. For indirect assignments, create account definitions for the clients and assign these to hierarchical roles. For more information, see Central user administration in One Identity Manager.

To react quickly to special requests, you can assign the clients directly to a user account. To do this, select the central system and the child system. Only SAP roles or profiles from this client can be assigned to a user account.

This task is only available if the client of the selected user account is labeled as central system.

To assign a user account directly to a client

  1. Select the SAP R/3 > User accounts category.
  2. Select the user account in the result list.
  3. Select the Assign access to clients task.

To assign a client

  1. Click Add.

    This inserts a new row in the table.

  2. From the Client menu, select the client in which you want the user account to receive access permissions.

  3. Assign an account definition, if necessary.

  4. Assign more clients, if necessary.

  5. Save the changes.

To edit an assignment

  1. In the table, select the assignment that you want to edit. Edit the account definition's assignment.

  2. Save the changes.

To remove an assignment

  1. In the table, select the assignment that you want to remove.

  2. Click Delete.

  3. Save the changes.

Assigning SAP licenses

NOTE: This task is only available for user account managed through CUAClosed.

SAP licenses in child system and in the central system can be assigned to user account for system measurement. For more information, see Providing system measurement data.

To assign licenses to a user account

  1. In the Manager, select the SAP R/3 > User accounts category.

  2. Select the user account in the result list.

  3. Select the Assign SAP licenses in client systems task.

  4. Click Add.

    This inserts a new row in the table.

  5. Mark this row. Enter the measurement data.

  6. Save the changes.

To edit a license assignment

  1. In the Manager, select the SAP R/3 > User accounts category.

  2. Select the user account in the result list.

  3. Select the Assign SAP licenses in client systems task.

  4. Select an assignment in the table.

  1. Edit the measurement data.
  2. Save the changes.

To remove a license assignment

  1. In the Manager, select the SAP R/3 > User accounts category.

  2. Select the user account in the result list.

  3. Select the Assign SAP licenses in client systems task.

  4. Select an assignment in the table.

  1. Click Delete.
  2. Save the changes.

The following license information is displayed on the form.

Table 49: Measurement data for a centrally administrated user account
Property Description

Recipient client

Client containing the user account which is assigned a license. You can select the central system or a assigned child system.

License

User account license in the selected client.

License extension

License extension for the installed special version. Select the special version ID from the menu.

Country surcharge

Additional license fee.

Chargeable system

SAP system containing the client to be charged. This field is only shown if 04 (substitute) or 11 (Multi-client/system) is entered as the license.

Chargeable client

Client containing the user account to be charged. This field is only shown if 04 (substitute) or 11 (Multi-client/system) is entered as the license.

Chargeable user account

User account to be charged if 04 (substitute) or 11 (Multi-client/system) is entered as the license.

Substituted from

Time period in which another user account assumes responsibility. These fields are enabled if 04 (substitute) is entered as the license.

Substituted until

Related topics

Locking and unlocking SAP user accounts

The way that user accounts are managed determines how you lock them. User accounts that are not linked to an employee, can be locked with the Lock user account task.

To lock a user account

  1. In the Manager, select the SAP R/3 > User accounts category.
  2. Select the user account in the result list.
  3. Select the Lock SAP user account task.
  4. Confirm the prompt with OK.

    This generates a process that publishes the change in the target system. The User account locked option is enabled as soon as the process is successfully completed.

If the user account is linked to an employee, the user account is unlocked when a new central password is set for the employee. This behavior is controlled by the TargetSystem | SAPR3 | Accounts | UnlockByCentralPassword configuration parameter. For detailed information about an employee’s central password, see One Identity Manager Identity Management Base Module Administration Guide.

To unlock a user account manually

  1. In the Manager, select the SAP R/3 > User accounts category.
  2. Select the SAP user account in the result list.
  3. Select the Unlock SAP user account task.
  4. Confirm the prompt with OK.

    This generates a process that publishes the change in the target system. The User account locked option is disabled as soon as the process is successfully completed.

Detailed information about this topic

Assigning extended properties

Extended properties are meta objects, such as operating codes, cost codes, or cost accounting areas that cannot be mapped directly in One Identity Manager.

To specify extended properties for a user account

  1. Select the SAP R/3 > User accounts category.
  2. Select the user account in the result list.
  3. Select the Assign extended properties task.
  4. Assign extended properties in Add assignments.

    - OR -

    Remove extended properties in Remove assignments .

  5. Save the changes.
Detailed information about this topic
  • One Identity Manager Identity Management Base Module Administration Guide
관련 문서

The document was helpful.

평가 결과 선택

I easily found the information I needed.

평가 결과 선택