Chat now with support
Chat with Support

Identity Manager 9.1.2 - Administration Guide for the SAP R/3 Compliance Add-on

SAP functions and identity audit Setting up a synchronization project for synchronizing SAP authorization objects Setting up SAP functions Compliance rules for SAP functions Mitigating controls for SAP functions Configuration parameters for SAP functions Default project template for the SAP R/3 Compliance Add-on Module Referenced SAP R/3 tables and BAPI calls

Assigning mitigating controls to SAP functions

Mitigating controls can be stored with SAP functions. These reduce the effects on the company when SAP users match with SAP functions. At the same time, you specify how to deal with SAP users or SAP groups that match the SAP function. For example, changing a user assignment to an SAP role in the SAP system can be used as a mitigating control for an SAP function.

Mitigating controls can also be used as controlling measures for compliance rules. Mitigating controls assigned to the SAP functions for testing are automatically transferred into compliance rules about SAP functions.

Prerequisites:

  • Enabled compliance rules are assigned to a functional area and a department.

  • The SAP functions for testing are assigned to the same functional area and then associated variable set of the same department.

To edit mitigating controls

  • In the Designer, enable the QER | CalculateRiskIndex configuration parameter.
Detailed information about this topic

Assigning mitigating controls to a function definition

To assign mitigating controls to a function definition

  1. In the Manager, select the Identity Audit > SAP functions > Function definition working copies category.

  2. Select the working copy in the result list.

  3. Select the Assign mitigating controls task.

    In the Add assignments pane, assign the mitigating controls.

    TIP: In the Remove assignments pane, you can remove mitigating control assignments.

    To remove an assignment

    • Select the mitigating control and double-click .

  4. Save the changes.

Creating mitigating controls for SAP functions

To create a mitigating control for SAP functions

  1. In the Manager, select the Identity Audit > SAP functions > Function definition working copies category.

  2. Select a working copy in the result list.

  3. Select the Assign mitigating controls task.

  4. Select the Create mitigating controls task.

  5. Enter the main data of the mitigating control.

  6. Save the changes.

  7. Select the Assign function definitions task.

  8. In the Add assignments pane, double-click the function definitions you want to assign.

  9. Save the changes.
Detailed information about this topic

Base data for SAP functions

The following base data is relevant for SAP Functions:

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating