After you have entered the master data, you can run the following tasks.
SAP functions and identity audit
Setting up a synchronization project for synchronizing SAP authorization objects
Base data for SAP functions
Finding non-compliant authorizations
Setting up SAP functions
Using variables
Creating function definitions
Compliance rules for SAP functions
General master data for a function definition
Additional tasks for working copies
Defining function instances
Creating variable sets
Plugins for SAP functions
Function definition overview
Authorization Editor
Checking authorization objects for completeness
Authorization overview
Enabling working copies
Mitigating controls
Exporting a working copy
Additional tasks for function definitions
Rule conditions for SAP functions
More rule violation reports
Mitigating controls for compliance rules
Mitigating controls
Configuration parameters for SAP functions
Default project template for the SAP R/3 Compliance Add-on Module
Referenced SAP R/3 tables and BAPI calls
Additional tasks for function instances
Function instance overview
You can see the most important information about a function instance on the overview form.
To obtain an overview of a function instance
- Select the Identity Audit | SAP Functions | Function instances category.
- Select the function instance in the result list.
- Select the Function instance task.
Checking field variable definitions
Before you use function instances in compliance rules, check whether all variable which are used in the function definition are defined in the variable set. If there is no function definition or variable set assigned to the function instance, the check-in fails with an error message. Variables that are not defined in the associated variable set are listed in the error message.
To check variable definitions
- Select the Identity Audit | SAP Functions | Function instances category.
- Select the function instance in the result list.
-
Select the Change master data task.
- Select the Check variable definitions task.
Creating variable sets
Use variable sets to group variables together that are used in an authorization definition and give then fixed values.
To edit variable sets
- Select the Identity Audit | SAP Functions | Variable sets category.
- Select a variable set in the result list. Select the Change master data task.
- OR -
Click
in the result list.
- Edit the variable set's master data.
- Save the changes.