Chat now with support
Chat with Support

Identity Manager 8.0 - Administration Guide for SAP R/3 Analysis Authorizations Add-on

Adding BI Analysis Authorizations to the IT Shop

Adding BI Analysis Authorizations to the IT Shop

Once a BI analysis authorization has been assigned to an IT Shop shelf, it can be requested by the shop customers. To ensure it can be requested, further prerequisites need to be guaranteed.

  • The BI analysis authorization must be labeled with the option IT Shop.
  • The BI analysis authorization must be assigned to a service item.
  • The BI analysis authorization must be labeled with the option Only use in IT Shop if the BI analysis authorization can only be assigned to employees through IT Shop requests. Direct assignment to hierarchical roles may not be possible.

NOTE: IT Shop administrators can assign BI analysis authorization to IT Shop shelves in the case of role-based login. Target system administrators are not authorized to add BI analysis authorization in the IT Shop.

To add a BI analysis authorization to the IT Shop

  1. Select the category SAP R/3 | BI analysis authorizations (non role-based login)

    - OR -

    Select the category Entitlements | SAP BI analysis authorizations (role-based login

    .
  2. Select the BI analysis authorization in the result list.
  3. Select Add to IT Shop in the task view.
  4. Assign the BI analysis authorization to the IT Shop shelves in Add assignments.
  5. Save the changes.

To remove a BI analysis authorization from individual IT Shop shelves.

  1. Select the category SAP R/3 | BI analysis authorizations (non role-based login)

    - OR -

    Select the category Entitlements | SAP BI analysis authorizations (role-based login

    .
  2. Select the BI analysis authorization in the result list.
  3. Select Add to IT Shop in the task view.
  4. Remove the BI analysis authorization from the IT Shop shelves in Remove assignments.
  5. Save the changes.

To remove a BI analysis authorization from all IT Shop shelves.

  1. Select the category SAP R/3 | BI analysis authorizations (non role-based login)

    - OR -

    Select the category Entitlements | SAP BI analysis authorizations (role-based login

    .
  2. Select the BI analysis authorization in the result list.
  3. Select Remove from all shelves (IT Shop) in the task view.
  4. Confirm the security prompt with Yes.
  5. Click OK.

    This removes the BI analysis authorization from all One Identity Manager Service shelves. All requests and assignment requests with this BI analysis authorization are canceled in the process.

For more detailed information about request from company resources through the IT Shop, see the One Identity Manager IT Shop Administration Guide.

Related Topics

Additional Tasks for BI Analysis Authorizations

After you have entered the master data, you can apply different tasks to it. The task view contains different forms with which you can run the following tasks.

Overview of a BI Analysis Authorization

Overview of a BI Analysis Authorization

You can view the most important data about a BI analysis authorization on the overview formula.

To obtain an overview of BI analysis authorizations

  1. Select the category | BI analysis authorizationsSAP R/3.
  2. Select the BI analysis authorization in the result list.
  3. Select SAP BI analysis authorization overview in the task view.

General Master Data for a BI User Account

General Master Data for a BI User Account

Table 4: Configuration Parameters for Risk Assessment of BI User Accounts
Configuration parameter Active Meaning
QER\CalculateRiskIndex Preprocessor relevant configuration parameter controlling system components for calculating an employee's risk index. Changes to the parameter require recompiling the database.

If the parameter is set, values can be entered and calculated for the risk index.

You can view the following data for BI user accounts.

Table 5: BI User Account Master Data
Property Description
User account BI user account identifier.

All SAP user accounts with the same identifier automatically obtain the BI analysis authorizations, which are assigned to this BI user account if they belong to the this client's system.

System Unique system ID.
Canonical name The BI user account's canonical name. The canonical name is mapped through the SAP connector.
Distinguished name Distinguished name of the BI account. The distinguished name is found using a template.

Risk index (calculated)

Maximum risk index values for all assigned BI analysis authorizations. This property is only visible if the configuration parameter "QER\CalculateRiskIndex" is set. For more detailed information, see the .One Identity Manager Risk Assessment Administration Guide

User Account exists Specifies whether an SAP user account with the name as this BI user account exists in at least one client of the given system (SAPUserAccnt equals SAPB_WUser-Accnt).
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating