Chat now with support
Chat with Support

Identity Manager 9.1.2 - Administration Guide for the SAP R/3 Compliance Add-on

SAP functions and identity audit Setting up a synchronization project for synchronizing SAP authorization objects Setting up SAP functions Compliance rules for SAP functions Mitigating controls for SAP functions Configuration parameters for SAP functions Default project template for the SAP R/3 Compliance Add-on Module Referenced SAP R/3 tables and BAPI calls

Main data for function instances

Enter the following main data of a function instance.

Table 11: Function instance properties

Property

Description

Function definition

The function instance is created for this function definition.

Client

SAP client to which the SAP function should be applied.

Variable set

Variable set with functions defined, which are used in the function definition. The variable set and the function instance must be assigned to the same SAP client.

Manager/supervisor

Application role whose members are responsible for the function instance and variable sets in terms of content.

To create a new application role, click . Enter the application role name and assign a parent application role.

Display name

Function instance display name. This is formatted from the function definition name, the assigned client and variable set.

Description

Text field for additional explanation. The function definition description is copied to a new function instance.

Function Instance Elements

Displays SAP applications, approval objects, and function elements of the SAP function with specified values that are determined from the assigned variable set. Changes to the variables or variable set are displayed as soon as the DBQueue Processor has processed the corresponding authorization tasks.

Related topics

Checking field variable definitions

Before you use function instances in compliance rules, check whether all variable which are used in the function definition are defined in the variable set. If there is no function definition or variable set assigned to the function instance, the check-in fails with an error message. Variables that are not defined in the associated variable set are listed in the error message.

To check variable definitions

  1. In the Manager, select the Identity Audit > SAP functions > Function instances category.

  2. Select the function instance in the result list.

  3. Select the Change main data task.

  4. Select the Check variable definitions task.

Related topics

Function instance overview

You can see the most important information about a function instance on the overview form.

To obtain an overview of a function instance

  1. In the Manager, select the Identity Audit > SAP functions > Function instances category.

  2. Select the function instance in the result list.

  3. Select the Function instance task.

Creating and editing variable sets for authorization definitions

Use variable sets to group variables together that are used in an authorization definition and give then fixed values.

To create a variable set

  1. In the Manager, select the Identity Audit > SAP Functions > Variable sets category.

  2. Click in the result list.

  3. Edit the variable set's main data.

  4. Save the changes.

To edit a variable set

  1. In the Manager, select the Identity Audit > SAP Functions > Variable sets category.

  2. In the result list, select the variable set and run the Change main data task.

  3. Edit the variable set's main data.

  4. Save the changes.
Detailed information about this topic
Related topics
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating