Managing SAP R/3 Environments
Setting up SAP R/3 Synchronization
Users and Permissions for Synchronizing with SAP R/3
Installing the One Identity Manager Business Application Programing Interface
Setting Up the Synchronization Server
Creating a Synchronization Project for initial Synchronization of an SAP Client
Special Features of Synchronizing with a CUA Central System
Show Synchronization Results
Customizing Synchronization Configuration
Base Data for Managing SAP R/3
How to Configure SAP R/3 Synchronization
Configuring Synchronization of Different Clients
Updating Schemas
Adding Other Schema Types
Configuring a Schema Extension File
Speeding Up Synchronization with Revision Filtering
Synchronizing Collective Roles
Restricting Synchronization Objects using User Permissions
Post-Processing Outstanding Objects
Configuring Memberships Provisioning
Supporting Analysis of Synchronization Issues
Deactivating Synchronization
Setting Up Account Definitions
SAP Systems
SAP Clients
Creating an Account Definition
Setting Up Manage Levels
Creating a Formatting Rule for IT Operating Data
Determining IT Operating Data
Modifying IT Operating Data
Assigning Account Definitions to Employees
Basic Data for User Account Administration
Assigning Account Definitions to Departments, Cost Centers and Locations
Assigning Account Definitions to Business Roles
Assigning Account Definitions to all Employees
Assigning Account Definitions Directly to Employees
Assigning Account Definitions to System Roles
Adding Account Definitions in the IT Shop
Assigning Account Definitions to a Target System
Deleting an Account Definition
User Account Types
External Identifier Types
Parameter
Printers
Cost centers
Start Menu
Companies
Login Languages
Security Policies
Communications Types
Licenses
License Extensions
Password Policies
Editing a Server
Target system managers
Predefined Password Policies
Editing Password Policies
Custom Scripts for Password Requirements
Restricted Passwords
Testing a Password
Testing Generating a Password
Assigning a Password Policy
Initial Password for New SAP User Accounts
Email Notifications about Login Data
General Master Data for a SAP Client
Specifying Categories for Inheriting SAP Groups, SAP Roles and SAP Profiles
How to Edit a Synchronization Project
SAP User Accounts
Linking User Accounts to Employees
Supported User Account Types
Central User Administration in One Identity Manager
Entering Master Data for SAP User Accounts
SAP Groups, SAP Roles and SAP Profiles
General Master Data for an SAP User Account
SAP User Account Login Data
Phone numbers
Fax numbers
Email addresses
Fixed Values for an SAP User Account
Measurement Data
Parameter
SNC Data for an SAP User Account
Additional Tasks for Managing SAP User Accounts
Overview of User Accounts
Changing the Manage Level of an SAP User Account
Assigning SAP Groups and SAP Profiles Directly to an SAP User Account
Assigning SAP Roles Directly to an SAP User Account
Assigning Structural Profiles
Assigning Child Systems
Assigning SAP Licenses
Lock SAP User Account
Assigning Extended Properties
Automatic Assignment of Employees to SAP User Accounts
Locking SAP User Accounts
Deleting and Restoring SAP User Accounts
Entering External User Identifiers for an SAP User Account
Editing Master Data for SAP Groups, SAP Roles and SAP Profiles
SAP Products
General Master Data for SAP Groups
General Master Data for SAP Roles
General Master Data for SAP Profiles
Assigning SAP Groups, SAP Roles and SAP Profiles to SAP User Accounts
Assigning SAP Groups, SAP Roles and SAP Profiles to Organizations
Assigning SAP Groups, SAP Roles and SAP Profiles to Business Roles
Assigning SAP User Accounts directly to SAP Groups and SAP Profiles
Assigning SAP User Accounts directly to an SAP Roles
Adding SAP Groups, SAP Roles and SAP Profiles to System Roles
Adding SAP Groups, SAP Roles and SAP Profiles to the IT Shop
Role Assignment Validity Period
Assigning and Passing on SAP Profiles and SAP Roles to SAP User Accounts
Additional Tasks for Managing SAP Groups, SAP Roles and SAP Profiles
Overview of SAP Groups, SAP Roles and SAP Profiles
Effectiveness of SAP Groups, SAP Roles and SAP Profiles
Inheriting SAP Groups, SAP Roles and SAP Profiles based on Categories
Assigning Extended Properties to SAP Groups, SAP Roles and SAP Profiles
Showing SAP Authorizations
Calculating the Validity Date of Inherited Role Assignments
General Master Data for SAP Products
SAP Product Assignments to Employees
Providing System Measurement Data
Assigning SAP Products to Organizations
Assigning SAP Products to Business Roles
Assigning SAP Products directly to Employees
Adding SAP Products in System Roles
Adding SAP Products to the IT Shop
Additional Tasks for Managing SAP Products
Mapping Measurement Data
Entering licenses for SAP User Accounts
Finding Licenses using SAP Roles and SAP Profiles
Reports about SAP Systems
Appendix: Configuration Parameters for Managing an SAP R/3 Environment
Appendix: Default Project Templates for Synchronizing an SAP R/3 Environment
Project Template for Client without CUA
Project Template for the CUA Central System
Project Template for CUA Subsystems
Appendix: Referenced SAP R/3 Tables and BAPI Calls
Appendix: Example of a Schema Extension File
Additional Tasks for Managing SAP Products
Additional Tasks for Managing SAP Products
After you have entered the master data, you can apply different tasks to it. The task view contains different forms with which you can run the following tasks.
Assigning SAP Groups, SAP Roles and SAP Profiles to a SAP Product
Assigning Account Definitions to SAP Products
Assigning Subscribable Reports to SAP Products
Overview of SAP Products
Overview of SAP Products
To obtain an overview of an SAP product
- Select the category SAP R/3 | Products.
- Select the SAP product in the result list.
- Select System role overview in the task view.
Assigning SAP Groups, SAP Roles and SAP Profiles to a SAP Product
SAP Products > Additional Tasks for Managing SAP Products > Assigning SAP Groups, SAP Roles and SAP Profiles to a SAP Product
Assiging SAP Groups, SAP Roles and SAP Profiles to a SAP Product
Assign the groups, roles and profiles you want to include to the SAP product. Employees to which you assign this SAP product, will inherit these groups, roles and profiles.
|
|
NOTE: Groups, roles and profiles with the option Only use in IT Shop can only be assigned to SAP products that also have this option set. |
|
|
NOTE: Groups, roles and profiles can also be added to system roles that are not SAP products. |
To assign groups to an SAP product
- Select the category SAP R/3 | Products.
- Select the SAP product in the result list.
- Select Assign SAP groups in the task view.
- Assign groups in Add assignments.
- OR -
Remove groups in Remove assignments.
- Save the changes.
To assign profiles to an SAP product.
- Select the category SAP R/3 | Products.
- Select the SAP product in the result list.
- Select Assign SAP profiles in the task view.
- Assign profiles in Add assignments.
- OR -
Remove profiles in Remove assignments.
- Save the changes.
To assign roles to an SAP product
- Select the category SAP R/3 | Products.
- Select the SAP product in the result list.
- Select Assign SAP roles in the task view.
- Assign roles in Add assignments.
- OR -
Remove roles in Remove assignments.
- Save the changes.
Related Topics
Assigning Account Definitions to SAP Products
SAP Products > Additional Tasks for Managing SAP Products > Assigning Account Definitions to SAP Products
Assigning Account Definitions to SAP Products
Use this task to add account definitions to an SAP product. If you assign the SAP product to employees, the account definitions contained in the SAP product are inherited by the employees.
|
|
NOTE: Account definitions roles with the option Only use in IT Shop set, can only be assigned to SAP products that also have this option set. |
To assign account definition to an SAP product
- Select the category SAP R/3 | Products.
- Select the SAP product in the result list.
- Select Assign account definitions.
- Assign account definitions in Add assignments.
- OR -
Remove account definitions in Remove assignments.
- Save the changes.