Chat now with support
Chat with Support

Identity Manager 8.0 - Administration Guide for Connecting to SAP R/3

Managing SAP R/3 Environments Setting up SAP R/3 Synchronization Base Data for Managing SAP R/3 SAP Systems SAP Clients SAP User Accounts SAP Groups, SAP Roles and SAP Profiles SAP Products Providing System Measurement Data Reports about SAP Systems Appendix: Configuration Parameters for Managing an SAP R/3 Environment Appendix: Default Project Templates for Synchronizing an SAP R/3 Environment Appendix: Referenced SAP R/3 Tables and BAPI Calls Appendix: Example of a Schema Extension File

Mapping Measurement Data

Mapping Measurement Data

Measurement data is displayed on the master data form for user accounts which are not CUAClosed.

To display measurement data

  1. Select the category SAP R/3 | User accounts.
  2. Select the user account in the result list.
  3. Change to the Inventory data tab.

    This open the master data form with synchronized and calculated data for system measurement.

The following license information is displayed on the form.

Table 79: User Account Measurement Data
Property Description
Active License User account's license. The active license is loaded into the One Identity Manager database by synchronization or found from the calculated, employee-related license.

NOTE: The active license can be edited directly and changed. Changes to the active license are published immediately in the target system. The licenses stored with the roles and profiles are not effective in this case.

 NOTE: If licenses are stored with roles or profiles in which the user account is a member and the task Publishing calculated licenses is run, the active license stored directly with the user account is overwritten by the calculated license!
Special version  ID License extension for the installed special version. Select the special version ID from the menu. This is only enabled if special versions are permitted for the active license.
Country surcharge Additional license fee. This is only enabled if country surcharges are permitted for the active license.
Substitute Link to the user account which takes over as deputy for a specified time period. This field is only active if "04 (substitute)" or "11 (Multi-client/system)" is entered. The substitute user account obtains roles and profiles of the displayed user account for a specified time period.
Substituted from Time period in which another user account assumes responsibility. This input field is enabled if the active license is set to "04 (substitute)".
Substituted until
Calculated license (client) License determined from user account assigned roles and profiles within the client.
Calculated license (employee) License of most significant employee user account.

The client related calculated license is entered for the most significant user account. For all the other employee’s user accounts, the employee related calculated license "11 (Multi-client/system user)" is entered. This also contains a reference to the calculated most significant user account (Calculated ref. name).

Calculated ref. name Link to the calculated most significant user account if "11 (Multi-client/system user)" is entered.

Measurement data is displayed for each user account assignment to the target system and to child systems if the user accounts are managed over CUA,

To display measurement data for a centrally administered user account

  1. Select the category SAP R/3 | User accounts.
  2. Select the user account in the result list.
  3. Select Assign SAP licenses in client systems in the task view.
  4. Select an assignment in the table.

The following license information is displayed on the form.

Table 80: Measurement Data for a Centrally administrated User Account
Property Description
Recipient client Client containing the user account which is assigned a license. You can select the central system or a assigned child system.
License User account license in the selected client.
License extension License extension for the installed special version. Select the special version ID from the menu.
Country surcharge Additional license fee.
Chargeable system SAP system containing the client to be charged. This field is only shown if "04 (substitute)" or "11 (Multi-client/system)" is entered.
Chargeable client Client containing the user account to be charged. This field is only shown if "04 (substitute)" or "11 (Multi-client/system)" is entered.
Chargeable user account User account to be charged if "04 (substitute)" or "11 (Multi-client/system)" is entered.
Substituted from Time period in which another user account assumes responsibility. This input field is enabled if the active license is set to "04 (substitute)".
Substituted until
Related Topics

Entering licenses for SAP User Accounts

Entering licenses for SAP User Accounts

In order to maintain system measurement data directly in user accounts, enter the active license in the user accounts. This might be necessary, for example, for storing substitute licenses.

To enter a user account active license

  1. Select the category SAP R/3 | User accounts.
  2. Select the user account in the result list.
  3. Select the Measurement data tab.
  4. Select a license Active license from the menu.
  5. Enter any other data required, if necessary.
  6. Save the changes.

The active license is published in the target system.

 NOTE: If licenses are stored with roles or profiles in which the user account is a member and the task Publishing calculated licenses is run, the active license stored directly with the user account is overwritten by the calculated license!

To enter the centrally administrated user account's license

  1. Select the category SAP R/3 | User accounts.
  2. Select the user account in the result list.
  3. Select Assign SAP licenses in client systems in the task view.
  4. Click Add.

    This inserts a new row in the table.

  5. Mark this row. Enter the measurement data.
  6. Save the changes.
Detailed information about this topic

Finding Licenses using SAP Roles and SAP Profiles

Finding Licenses using SAP Roles and SAP Profiles

The most significant license can be determined from role and profile licenses that are not managed through CUAClosed. You must make the initial assignment of licenses manually after synchronizing roles and profiles. One Identity Manager determines the user account's highest rated license through user account memberships in roles and profiles. The employee's most significant user account is found across clients and system. The most significant license is added to the user account as the active license and published in the target system.

To assign roles and profiles

  1. Select the category SAP R/3 | Roles.

    – OR –

    Select the category SAP R/3 | Profiles.

  2. Select the role or profile in the result list.
  3. Assign a license in License.
  4. Save the changes.
Related Topics

Determining an SAP User Account Rating

Determining an SAP User Account Rating

 NOTE: In this section, roles and profiles are grouped under the term "SAP system authorizations" to make it easier to understand.

A rating for a user account is determined in One Identity Manager by rating profiles and roles in which the user account is a member. Licenses have to be entered for the profiles and roles as a prerequisite. You have to make this assignment once manually after the objects have been synchronized. When the most significant user account is determined, the license names and any manually issued license value are taken into account.

A recalculation task for the DBQueue Processor is generated to determine license rating. The recalculation task is generated when:

  • The option System measurement enabled for the SAP system is disabled/enabled.
  • The option Has user account management for the SAP client is disabled/enabled.
  • User account assignments to roles or profiles are changed
  • Role assignment validity periods are changed
  • License's rating changes
  • License assignments to roles or profiles are changed
  • Employee assignment to user accounts
  • The user account substitute is changed

The most highly rated user account is determined in One Identity Manager in a two step process.

  1. Determining the significance of a user account within a client (client related)

    Memberships in system authorizations within a client are calculated for a userSAP account. Through this, the SAP system authorization is found with the highest rating. The license for the most significant SAP system authorization is added to the user account as Calculated license (client). The most significant SAP system authorization fulfills the following criteria:

    1. The assigned license has the lowest license rating (in alphanumeric sort order).
    2. If several SAP system authorizations with the same license rating are assigned or no license rating has been given, the valid license is the one with the highest rating.
  2. Determining the most highly rated user account (employee related)
    1. The most significant user account is determined from all the employee’s user account sin all clients and all systems. The criteria from 1a) and 1b) apply for these user accounts. The license for the most highly rated user account is added to the user account as Calculated license (employee). A reference to the user account calculated with the most significance is entered for the all the employee's other user accounts in Calculated ref. name. These user account contain the license "11 (Multi-client/system) or "04 (substitute)".
      Table 81: Employee related license
      User accounts Calculated license (employee)
      Most significant user account Calculated license (client)
      Remaining user accounts in clients of the same systems as the most significant user account 04 (substitute)
      Remaining user accounts in clients of the other systems than the most significant user account 11 (Multi-client/system)
    2. If a user account is not assigned an employee, the rating calculated under 1) is seen as the most significant and the license entry is added to the user account as Calculated license (employee).

Figure 5: Determining an SAP User Account Rating

Related Topics
Related Documents