SAP products can be assigned directly or indirectly to employees. In the case of indirect assignment, employees and SAP products are arranged in hierarchical roles. The number of SAP products assigned to an employee is calculated from the position in the hierarchy and the direction of inheritance.
If you add an employee to roles and that employee owns a user account, the user account is added to all groups, roles, or profiles included in the SAP products owned by the employee. The groups, roles, or profiles are not inherited if the SAP product is disabled or if the share date is still in the future.
Furthermore, SAP products can be assigned to employees through IT Shop requests. SAP products can be assigned through IT Shop requests by adding employees to a shop as customers. All SAP products are assigned to this shop can be requested by the customers. Requested SAP products are assigned to the employees after approval is granted.
Prerequisites for indirect assignment of SAP groups, roles, and profiles through SAP products to user accounts are:
- Assignment of system roles, employees, groups, roles, and profiles is permitted for role classes (departments, cost centers, locations, or business roles).
- The user accounts are labeled with the Groups can be inherited, Profiles can be inherited, and Roles can be inherited options.
- The user accounts, groups, roles, and profiles belong to the same SAP client.
For more information see the following guides:
Topic |
Guide |
---|---|
Basic principles for assigning and inheriting company resources |
One Identity Manager Identity Management Base Module Administration Guide One Identity Manager Business Roles Administration Guide |
Assigning company resources through IT Shop requests |
One Identity Manager IT Shop Administration Guide |
System roles |
One Identity Manager System Roles Administration Guide |
Detailed information about this topic
- Assigning SAP products to organizations
- Assigning SAP products to business roles
- Assigning SAP products directly to employees
- Adding SAP products to system roles
- Adding SAP products to the IT Shop