Chat now with support

Get Live Help
Complete Registration

Sign In

Request Pricing

Contact Sales

Identity Manager 8.0 - Administration Guide for Connecting to SAP R/3

Table of Contents

Managing SAP R/3 Environments

Architecture Overview One Identity Manager Users for Managing SAP R/3

Setting up SAP R/3 Synchronization

Users and Permissions for Synchronizing with SAP R/3 Installing the One Identity Manager Business Application Programing Interface Setting Up the Synchronization Server Creating a Synchronization Project for initial Synchronization of an SAP Client Special Features of Synchronizing with a CUA Central System

Excluding child Systems from Synchronization

Show Synchronization Results Customizing Synchronization Configuration

How to Configure SAP R/3 Synchronization Configuring Synchronization of Different Clients Updating Schemas Adding Other Schema Types Configuring a Schema Extension File

Defining Tables Defining Functions Defining Schema Types

Speeding Up Synchronization with Revision Filtering Synchronizing Collective Roles Restricting Synchronization Objects using User Permissions Post-Processing Outstanding Objects Configuring Memberships Provisioning Supporting Analysis of Synchronization Issues Deactivating Synchronization

Base Data for Managing SAP R/3

Setting Up Account Definitions

Creating an Account Definition

Master Data for an Account Definition

Setting Up Manage Levels

Master Data for a Manage Level

Creating a Formatting Rule for IT Operating Data Determining IT Operating Data Modifying IT Operating Data Assigning Account Definitions to Employees

Assigning Account Definitions to Departments, Cost Centers and Locations Assigning Account Definitions to Business Roles Assigning Account Definitions to all Employees Assigning Account Definitions Directly to Employees Assigning Account Definitions to System Roles Adding Account Definitions in the IT Shop

Assigning Account Definitions to a Target System Deleting an Account Definition

Basic Data for User Account Administration

User Account Types External Identifier Types Parameter Printers Cost centers Start Menu Companies Login Languages Security Policies Communications Types Licenses License Extensions Password Policies

Predefined Password Policies Editing Password Policies

General Master Data for a Password Policy Policy Settings Character Sets for Passwords

Custom Scripts for Password Requirements

Script for Checking a Password Script for Generating a Password

Restricted Passwords Testing a Password Testing Generating a Password Assigning a Password Policy

Initial Password for New SAP User Accounts Email Notifications about Login Data

Editing a Server

Master Data for a Job Server Specifying Server Functions

Target system managers

SAP Systems SAP Clients

General Master Data for a SAP Client Specifying Categories for Inheriting SAP Groups, SAP Roles and SAP Profiles How to Edit a Synchronization Project

SAP User Accounts

Linking User Accounts to Employees Supported User Account Types Central User Administration in One Identity Manager Entering Master Data for SAP User Accounts

General Master Data for an SAP User Account SAP User Account Login Data Phone numbers Fax numbers Email addresses Fixed Values for an SAP User Account Measurement Data Parameter SNC Data for an SAP User Account

Additional Tasks for Managing SAP User Accounts

Overview of User Accounts Changing the Manage Level of an SAP User Account Assigning SAP Groups and SAP Profiles Directly to an SAP User Account Assigning SAP Roles Directly to an SAP User Account Assigning Structural Profiles Assigning Child Systems Assigning SAP Licenses Lock SAP User Account Assigning Extended Properties

Automatic Assignment of Employees to SAP User Accounts

Editing Search Criteria for Automatic Employee Assignment

Locking SAP User Accounts Deleting and Restoring SAP User Accounts Entering External User Identifiers for an SAP User Account

SAP Groups, SAP Roles and SAP Profiles

Editing Master Data for SAP Groups, SAP Roles and SAP Profiles

General Master Data for SAP Groups General Master Data for SAP Roles General Master Data for SAP Profiles

Assigning SAP Groups, SAP Roles and SAP Profiles to SAP User Accounts

Assigning SAP Groups, SAP Roles and SAP Profiles to Organizations Assigning SAP Groups, SAP Roles and SAP Profiles to Business Roles Assigning SAP User Accounts directly to SAP Groups and SAP Profiles Assigning SAP User Accounts directly to an SAP Roles Adding SAP Groups, SAP Roles and SAP Profiles to System Roles Adding SAP Groups, SAP Roles and SAP Profiles to the IT Shop Role Assignment Validity Period Assigning and Passing on SAP Profiles and SAP Roles to SAP User Accounts

Additional Tasks for Managing SAP Groups, SAP Roles and SAP Profiles

Overview of SAP Groups, SAP Roles and SAP Profiles Effectiveness of SAP Groups, SAP Roles and SAP Profiles Inheriting SAP Groups, SAP Roles and SAP Profiles based on Categories Assigning Extended Properties to SAP Groups, SAP Roles and SAP Profiles Showing SAP Authorizations

Calculating the Validity Date of Inherited Role Assignments

General Master Data for SAP Products SAP Product Assignments to Employees

Assigning SAP Products to Organizations Assigning SAP Products to Business Roles Assigning SAP Products directly to Employees Adding SAP Products in System Roles Adding SAP Products to the IT Shop

Additional Tasks for Managing SAP Products

Overview of SAP Products Assigning SAP Groups, SAP Roles and SAP Profiles to a SAP Product Assigning Account Definitions to SAP Products Assigning Subscribable Reports to SAP Products Assigning Extended Properties to SAP Products Edit Conflicting System Roles

Providing System Measurement Data

Mapping Measurement Data Entering licenses for SAP User Accounts Finding Licenses using SAP Roles and SAP Profiles

Determining an SAP User Account Rating Transferring Calculated Licenses

Reports about SAP Systems

Overview of all Assignments

Appendix: Configuration Parameters for Managing an SAP R/3 Environment Appendix: Default Project Templates for Synchronizing an SAP R/3 Environment

Project Template for Client without CUA Project Template for the CUA Central System Project Template for CUA Subsystems

Appendix: Referenced SAP R/3 Tables and BAPI Calls Appendix: Example of a Schema Extension File

Appendix: Referenced SAP R/3 Tables and BAPI Calls

Appendix: Referenced SAP R/3 Tables and BAPI Calls

Appendix: Referenced SAP R/3 Tables and BAPI Calls

The following overview provides information about all the tables in an SAP R/3 system referenced during synchronization and the BAPI calls that are executed.

Table 88: Referenced Tables and BAPIs
Tables	BAPI Calls
ADR2 ADR3 ADR6 AGR_1016 AGR_AGRS AGR_DEFINE AGR_USERS ANLA ANLZ CSKS CSKT DD02L DD03L DD04L DD07L RSECUSERAUTH RSECTXT SEC_POLICY_CUST SEC_POLICY_RT T000 T001 T002 T591S T500P T548T TMENU01 TMENU01R TPARA TSAD3 TSAD3T TSAC TSADC TSP03 TTREE TUTYPA TUTYPPL TUZUS USGRP_USER USL04 USLA04 USR01 USR02 USR05 USR06 USR06SYS USR12 USR21 USREFUS USREXTID UST04 UST10C USZBVLNDSC USZBVLNDRC USZBVSYS USRSYSACTT USRSYSPRF USRSTAMP V_USCOMPA	BAPI_USER_CREATE1 BAPI_USER_GET_DETAIL BAPI_USER_CHANGE BAPI_USER_DELETE BAPI_USER_LOCK BAPI_USER_UNLOCK BAPI_USER_ACTGROUPS_ASSIGN BAPI_USER_ACTGROUPS_DELETE BAPI_USER_PROFILES_ASSIGN BAPI_USER_PROFILES_DELETE BAPI_USER_LOCACTGROUPS_READ BAPI_USER_LOCACTGROUPS_DELETE BAPI_USER_LOCPROFILES_READ BAPI_USER_LOCPROFILES_DELETE BAPI_USER_SYSTEM_ASSIGN SUSR_USER_CHANGE_PASSWORD_RFC BAPI_USER_LOCPROFILES_ASSIGN BAPI_USER_LOCACTGROUPS_ASSIGN RFC_READ_TABLE

Appendix: Example of a Schema Extension File

Appendix: Example of a Schema Extension File

<?xml version="1.0" encoding="utf-8" ?>

<SAP>

<Functions>

<Function Definition = "USER GET" FunctionName="BAPI_USER_GET_DETAIL" OutStructure = "" Key ="USERNAME" X500 ="CN">

<Mapping Closed >

<Data ParameterName = "USERNAME" PropertyName = "BNAME" />

</Mapping>

</Function>

<Function Definition = "USER SET" FunctionName="BAPI_USER_CHANGE" OutStructure ="" Key ="USERNAME" X500 ="CN">

<Mapping>

<Data ParameterName = "USERNAME" PropertyName = "BNAME" />

</Mapping>

</Function>

<Function Definition = "USER DEL" FunctionName="BAPI_USER_DELETE" OutStructure ="" Key ="USERNAME" X500 ="CN" >

<Mapping>

<Data ParameterName = "USERNAME" PropertyName = "BNAME" />

</Mapping>

</Function>

<Function Definition = "USER PROFILE SET" FunctionName="BAPI_USER_PROFILES_ASSIGN" OutStructure ="" Key ="USERNAME" X500 ="CN">

<Mapping>

<Data ParameterName = "USERNAME" PropertyName = "BNAME" />

<Data ParameterName = "BAPIPROF~BAPIPROF" PropertyName = "$Value$" />

</Mapping>

</Function>

<Function Definition = "BWProfileAdd" FunctionName="/VIAENET/SAPHR_RSECUSERAUT_ADD" OutStructure ="" Key ="ZUSRNAME,ZHIER" X500 ="CN,OU">

<Mapping>

<Data ParameterName = "ZUSRNAME" PropertyName = "UNAME" />

<Data ParameterName = "ZHIER" PropertyName = "AUTH" />

</Mapping>

</Function>

<Function Definition = "BWProfileDel" FunctionName="/VIAENET/SAPHR_RSECUSERAUT_DEL" OutStructure ="" Key ="ZUSRNAME,ZHIER" X500 ="CN,OU">

<Mapping>

<Data ParameterName = "ZUSRNAME" PropertyName = "UNAME" />

<Data ParameterName = "ZHIER" PropertyName = "AUTH" />

</Mapping>

</Function>

<Function Definition = "BWProfileDelFkt" FunctionName="/VIAENET/SAPHR_RSECUSERAUT_DEL" OutStructure ="" Key ="ZUSRNAME,ZHIER" X500 ="CN,OU">

<Mapping>

<Data ParameterName = "ZUSRNAME" PropertyName = "BNAME" />

<Data ParameterName = "ZHIER" PropertyName = "$VALUE$" />

</Mapping>

</Function>

<Function Definition = "BWProfileAddFkt" FunctionName="/VIAENET/SAPHR_RSECUSERAUT_ADD" OutStructure ="" Key ="ZUSRNAME,ZHIER" X500 ="CN,OU">

<Mapping>

<Data ParameterName = "ZUSRNAME" PropertyName = "BNAME" />

<Data ParameterName = "ZHIER" PropertyName = "$VALUE$" />

</Mapping>

</Function>

</Functions>

<Tables>

<TABLE Definition = "TUZUS-Table" TableName="TUZUS" Key="SONDERVERS" X500="CN" SQL="LANGU = sy-langu" Load="SONDERVERS,TEXTSVERS" />

<TABLE Definition = "USR05-Table" TableName="USR05" Key="BNAME,PARID" X500="CN,OU" SQL="MANDT = '$MANDT$'" Load="BNAME,PARID,PARVA">

<Mapping>

<Data ParameterName = "$BNAME$" PropertyName = "BNAME" />

<Data ParameterName = "$PARID$" PropertyName = "PARID" />

</Mapping>

</TABLE>

<TABLE Definition = "USR04-Table" TableName="USR04" Key="BNAME,MANDT" X500="CN,OU" SQL="MANDT = sy-mandt" Load="" />

<TABLE Definition = "RSECUSERAUTH-Table" TableName="RSECUSERAUTH" Key="UNAME,AUTH" X500="CN,OU" SQL="" Load="" />

<TABLE Definition = "RSECUSERAUTH-SingleUser" TableName="RSECUSERAUTH" Key="AUTH" X500="CN" SQL="UNAME = '$BNAME$'" Load="" >

<Mapping>

<Data ParameterName = "$BNAME$" PropertyName = "BNAME" />

</Mapping>

</TABLE>

</Tables>

<SAPExtendedSchematypes>

<SAPExtendedSchematype Bem = "M:N, add/del - function" Name = "BWUserInBWP" DisplayPattern="%UNAME% - %AUTH%" ListObjectsDefinition = "RSECUSERAUTH-Table" ReadObjectDefinition = "RSECUSERAUTH-Table" InsertObjectDefinition = "BWProfileAdd" DeleteObjectDefinition = "BWProfileDel" />

<SAPExtendedSchematype Bem = "simple read only table" Name = "LicenceExtension" DisplayPattern="%SONDERVERS%" ListObjectsDefinition = "TUZUS-Table" ReadObjectDefinition ="TUZUS-Table" InsertObjectDefinition = "" WriteObjectDefinition = "" DeleteObjectDefinition = "" ParentType = "SAPSYSTEM" />

<SAPExtendedSchematype Bem = "Test" Name = "USERFunctionTable" DisplayPattern="%BNAME% (%MANDT%)" ListObjectsDefinition = "USR05-Table" ReadObjectDefinition ="USER GET" WriteObjectDefinition = "USER SET" DeleteObjectDefinition = "USER DEL" >

<Properties>

<Property Name = "SAPBWP" Description="all the user's BW profiles" ListFunction="RSECUSERAUTH-SingleUser" AddFunction="BWProfileAddFkt" DelFunction="BWProfileDelFkt" ReplaceFunction="" IsMultivalued = "true" />

<Property Name = "USERPROFILE" Description="all the user's profiles" ListFunction="USR04-Table" AddFunction="" DelFunction="" ReplaceFunction="USER PROFILE SET" IsMultivalued = "true" />

</Properties>

</SAPExtendedSchematype>

</SAPExtendedSchematypes>

</SAP>

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating

© ALL RIGHTS RESERVED. Feedback Terms of Use Privacy