지금 지원 담당자와 채팅
지원 담당자와 채팅

Identity Manager 9.0 LTS - Administration Guide for the SAP R/3 Compliance Add-on

SAP functions and identity audit Setting up a synchronization project for synchronizing SAP authorization objects Base data for SAP functions Finding non-compliant authorizations Setting up SAP functions Compliance rules for SAP functions Mitigating controls for SAP functions Configuration parameters for SAP functions Default project template for the SAP R/3 Compliance Add-on Module Referenced SAP R/3 tables and BAPI calls

Function instance overview

You can see the most important information about a function instance on the overview form.

To obtain an overview of a function instance

  1. In the Manager, select the Identity Audit > SAP functions > Function instances category.
  2. Select the function instance in the result list.
  3. Select the Function instance task.

Checking field variable definitions

Before you use function instances in compliance rules, check whether all variable which are used in the function definition are defined in the variable set. If there is no function definition or variable set assigned to the function instance, the check-in fails with an error message. Variables that are not defined in the associated variable set are listed in the error message.

To check variable definitions

  1. In the Manager, select the Identity Audit > SAP functions > Function instances category.
  2. Select the function instance in the result list.
  3. Select the Change main data task.

  4. Select the Check variable definitions task.
Related topics

Adding variable set for authorization objects

Use variable sets to group variables together that are used in an authorization definition and give then fixed values.

To create or edit authorization objects

  1. In the Manager, select the Identity Audit > SAP Functions > Variable sets category.

  2. In the result list, select the variable set and run the Change main data task.

    - OR -

    Click in the result list.

  3. Edit the variable set's main data.

  4. Save the changes.
Detailed information about this topic
Related topics

Main data for a variable set

Enter the following main data of variable sets.

Table 17: Main data for a variable set

Property

Description

Variable set

Unique variable set identifier.

Client

Valid SAP client for the variable set.

Department

Relevant department for the variable set.

Functional area

Functional area relevant to the variable set.

Description

Text field for additional explanation.

SAP field variables

List of defined variables.

To create a field variable in the variable set

  • Click Add and enter the following properties.

    • Variable: Name of the variable in ${alphanum}+$ notation.

      NOTE: Variable names cannot begin with system variable names. Variable sets with variables like this cannot be saved.

    • Value: Concrete instances for the variable to be copied to the function instance.

    • Description: Text field for additional explanation.

    • Authorization object: Reference to the authorization object to use in the variable in.

    There is help for your selected on the form. On the form, there is help available for selecting authorization fields for an authorization object to be used for defining variables.

To delete a field variable from the variable set

  1. Select a line in the list of field variables.

  2. Click Remove selected.

TIP: You can add variable sets without defining variables. Use these variables set for function definitions that do not have variables entered as values.

Detailed information about this topic
Related topics
관련 문서

The document was helpful.

평가 결과 선택

I easily found the information I needed.

평가 결과 선택