Chat now with support
Chat with Support

Identity Manager 8.0 - Administration Guide for Connecting to SAP R/3

Managing SAP R/3 Environments Setting up SAP R/3 Synchronization Base Data for Managing SAP R/3 SAP Systems SAP Clients SAP User Accounts SAP Groups, SAP Roles and SAP Profiles SAP Products Providing System Measurement Data Reports about SAP Systems Appendix: Configuration Parameters for Managing an SAP R/3 Environment Appendix: Default Project Templates for Synchronizing an SAP R/3 Environment Appendix: Referenced SAP R/3 Tables and BAPI Calls Appendix: Example of a Schema Extension File

Assigning Subscribable Reports to SAP Products

Assigning Subscribable Reports to SAP Products

Installed Module: Report Subscription Module

Use this task to add subscribable reports to an SAP product. If you assign the SAP product to employees, the subscribable reports contained in the SAP product are inherited by the employees.

 NOTE: Subscribable reports with the option Only use in IT Shop set, can only be assigned to SAP products that also have this option set.

To assign subscribable reports to an SAP product

  1. Select the category SAP R/3 | Products.
  2. Select the SAP product in the result list.
  3. Select Assign subscribable reports in the task view.
  4. Assign subscribable reports in Add assignments.

    - OR -

    Remove subscribable reports in Remove assignments.

  5. Save the changes.
Detailed information about this topic
  • One Identity Manager Report Subscriptions Administration Guide

Assigning Extended Properties to SAP Products

Assigning Extended Properties to SAP Products

Extended properties are meta objects that cannot be mapped directly in the One Identity Manager, for example, operating codes, cost codes or cost accounting areas.

To specify extended properties for an SAP product

  1. Select the category SAP R/3 | Products.
  2. Select the SAP product in the result list.
  3. Select Assign extended properties in the task view.
  4. Assign extended properties in Add assignments.

    - OR -

    Remove extended properties from Remove assignments.

  5. Save the changes.
Related Topics

Edit Conflicting System Roles

Edit Conflicting System Roles

Table 78: Configuration Parameters for Editing Mutually Exclusive Roles
Configuration parameter Active Meaning
QER\Structures\ExcludeStructures Preprocessor relevant configuration parameter for controlling the model parts that specify conflicts between roles. Changes to the parameter require recompiling the database.

If the parameter is set, you can specify which roles are mutually exclusive.

It is possible that employees may not own certain groups, roles and profiles at the same time. To avoid this, you can assign mutually exclusive groups, roles and profiles to different SAP products. Define these SAP products afterward as conflicting system roles. This means that conflicting system roles can be grouped together into a system role.

 NOTE: Only SAP products, which are defined directly as conflicting system roles cannot be assigned to the same employee. Definitions made on parent or child SAP products do not affect the assignment.

To implement conflicting system roles

  • Set the configuration parameter "QER\Structures\ExcludeStructures" in the Designer and compile the database.

To define conflicting system roles

  1. Select the category SAP R/3 | Products.
  2. Select the SAP product in the result list for which you want to define conflicting system roles.
  3. Select Edit conflicting system roles from the task view.
  4. Double-click on the system roles in Add assignments to exclude them from the selected SAP product.

    - OR -

    Double-click on the system roles in Remove assignments which are no longer excluded.

  5. Save the changes.

Providing System Measurement Data

Providing System Measurement Data

User account license information can be mapped in One Identity Manager. An employee can have several user accounts which belong to different clients and systems. The employee's most significant user account is required for system measurement. This user account is determined as a chargeable user account by system measurement. One Identity Manager calculates user account ratings from the licenses assigned.

The employee's most significant user account is automatically determined from all user accounts not managed though CUAClosed. CUA user accounts are mapped in the license information in One Identity Manager and can be edited. The most significant user account is not, however, determined automatically.

System measurement data is supplied in One Identity Manager. The actual measurement takes place in the target system.

To make system measurement data available

  1. Set the option Enable system measurement in the SAP system.
  2. Set the option Has user administration in the client.
  3. Enter the license data
    1. Enter the license for roles and profiles. One Identity Manager finds the user account's licenses from the licenses of all roles and profiles in which the user account is a member.

      – OR –

    2. Enter the active license directly in the user account.

    One Identity Manager calculates the most significant user account license from the licenses entered.

  4. Publish the measurement data.

    The calculated licenses are transferred to the active licenses. Active licenses are published in the target system. System measurement can be carried out there.

Detailed information about this topic
Related Documents