Chat now with support
Chat with Support

Identity Manager 8.0 - Administration Guide for Connecting to SAP R/3

Managing SAP R/3 Environments Setting up SAP R/3 Synchronization Base Data for Managing SAP R/3 SAP Systems SAP Clients SAP User Accounts SAP Groups, SAP Roles and SAP Profiles SAP Products Providing System Measurement Data Reports about SAP Systems Appendix: Configuration Parameters for Managing an SAP R/3 Environment Appendix: Default Project Templates for Synchronizing an SAP R/3 Environment Appendix: Referenced SAP R/3 Tables and BAPI Calls Appendix: Example of a Schema Extension File

Assigning SAP Groups, SAP Roles and SAP Profiles to SAP User Accounts

Assigning SAP Groups, SAP Roles and SAP Profiles to SAP User Accounts

Groups, roles and profiles can be directly and indirectly assigned to user accounts. In the case of indirect assignment, employees, groups, roles and profiles are arranged in hierarchical roles. The number of groups, roles and profiles assigned to an employee is calculated from the position in the hierarchy and the direction of inheritance. If you add an employee to roles and that employee owns a user account, the user account is added to the group, role or profile. Prerequisites for indirect assignment of employees to user accounts:

  • Assignment of employees and groups, roles and profiles is permitted for role classes (department, cost center, location or business role).
  • The user accounts are marked with the option Groups can be inherited.
  • User accounts and groups, roles and profiles belong to the same SAP clients.

Furthermore, groups, roles and profiles can be assigned to employees through IT Shop requests. Add employees to a shop as customers so that groups, roles and profiles can be assigned through IT Shop requests. All groups, roles and profiles are assigned to this shop can be requested by the customers. Requested groups, roles and profiles are assigned to the employees after approval is granted.

NOTE: Only profiles that are not assigned to an SAP role can be assigned to hierarchical roles.
Detailed information about this topic

Assigning SAP Groups, SAP Roles and SAP Profiles to Organizations

Assigning SAP Groups, SAP Roles and SAP Profiles to Organizations

Assign groups, roles and profiles to departments, cost centers and locations in order to assign user accounts to them through these organizations.

To assign a group to departments, cost centers or locations (non role-based login)

  1. Select the category SAP R/3 | Groups.
  2. Select the group in the result list.
  3. Select Assign organizations.
  4. Assign organizations in Add assignments.
    • Assign departments on the Departments tab.
    • Assign locations on the Locations tab.
    • Assign cost centers on the Cost center tab.

    - OR -

    Remove the organizations in Remove assignments.

  5. Save the changes.

To assign a role to departments, cost centers or locations (non role-based login)

  1. Select the category SAP R/3 | Roles.
  2. Select the role in the result list.
  3. Select Assign organizations.
  4. Assign organizations in Add assignments.
    • Assign departments on the Departments tab.
    • Assign locations on the Locations tab.
    • Assign cost centers on the Cost center tab.

    - OR -

    Remove the organizations in Remove assignments.

  5. Save the changes.

To assign a profile to departments, cost centers or locations (non role-based login)

  1. Select the category SAP R/3 | Profiles.
  2. Select a profile in the result list.
  3. Select Assign organizations.
  4. Assign organizations in Add assignments.
    • Assign departments on the Departments tab.
    • Assign locations on the Locations tab.
    • Assign cost centers on the Cost center tab.

    - OR -

    Remove the organizations in Remove assignments.

  5. Save the changes.

To assign groups, roles or profiles to departments, cost centers or locations (non role-based login)

  1. Select the category Organizations | Departments.

    - OR -

    Select the category Organizations | Cost centers.

    - OR -

    Select the category Organizations | Locations.

  2. Select the department, cost center or location in the result list.
  3. Select Assign SAP groups in the task view.

    - OR -

    Select Assign SAP roles in the task view.

    - OR -

    Select Assign SAP profiles in the task view.

  4. Select the groups, roles or profiles in Add assignments.

    - OR -

    Remove the groups, roles or profiles in Remove assignments.

  5. Save the changes.
Related Topics

Assigning SAP Groups, SAP Roles and SAP Profiles to Business Roles

Assigning SAP Groups, SAP Roles and SAP Profiles to Business Roles

Installed Module: Business Roles Module

You assign groups, roles and profiles to business roles in order to assign them to user accounts over business roles.

To assign a group to a business role (non role-based login)

  1. Select the category SAP R/3 | Groups.
  2. Select the group in the result list.
  3. Select Assign business roles in the task view.
  4. Assign business roles in Add assignments.

    - OR -

    Remove business roles from Remove assignments.

  5. Save the changes.

To assign a role to a business role (non role-based login)

  1. Select the category SAP R/3 | Roles.
  2. Select the role in the result list.
  3. Select Assign business roles in the task view.
  4. Assign business roles in Add assignments.

    - OR -

    Remove business roles from Remove assignments.

  5. Save the changes.

To assign a profile to a business role (non role-based login)

  1. Select the category SAP R/3 | Profiles.
  2. Select a profile in the result list.
  3. Select Assign business roles in the task view.
  4. Assign business roles in Add assignments.

    - OR -

    Remove business roles from Remove assignments.

  5. Save the changes.

To assign groups, roles or profiles to a business role (non role-based login)

  1. Select the category Business roles | <Role class>.
  2. Select the business role in the result list.
  3. Select Assign SAP groups in the task view.

    - OR -

    Select Assign SAP roles in the task view.

    - OR -

    Select Assign SAP profiles in the task view.

  4. Select the groups, roles or profiles in Add assignments.

    - OR -

    Remove the groups, roles or profiles in Remove assignments.

  5. Save the changes.
Related Topics

Assigning SAP User Accounts directly to SAP Groups and SAP Profiles

Assigning SAP User Accounts directly to SAP Groups and SAP Profiles

To react quickly to special requests, you can assign groups and profiles directly to user accounts.

NOTE:

  • Only profiles that are not assigned to SAP roles can be assigned to user accounts.
  • Generated profiles cannot be assigned to user accounts.

The following applies if user accounts are managed by CUAClosed:

  • The group (the profile) is assigned to the central system, or
  • The group's (the profile's) client is assigned as a child system to the user accounts

To assign a group directly to user accounts

  1. Select the category SAP R/3 | Groups.
  2. Select the group in the result list.
  3. Select Assign user accounts in the task view.
  4. Assign user accounts in Add assignments.

    - OR -

    Remove user accounts in Remove assignments.

  5. Save the changes.

To assign a profile directly to user accounts

  1. Select the category SAP R/3 | Profiles.
  2. Select a profile in the result list.
  3. Select Assign user accounts in the task view.
  4. Assign user accounts in Add assignments.

    - OR -

    Remove user accounts in Remove assignments.

  5. Save the changes.
Related Topics
Related Documents