Adding BI Analysis Authorizations to the IT Shop
Adding BI Analysis Authorizations to the IT Shop
Once a BI analysis authorization has been assigned to an IT Shop shelf, it can be requested by the shop customers. To ensure it can be requested, further prerequisites need to be guaranteed.
- The BI analysis authorization must be labeled with the option IT Shop.
- The BI analysis authorization must be assigned to a service item.
- The BI analysis authorization must be labeled with the option Only use in IT Shop if the BI analysis authorization can only be assigned to employees through IT Shop requests. Direct assignment to hierarchical roles may not be possible.
|
NOTE: IT Shop administrators can assign BI analysis authorization to IT Shop shelves in the case of role-based login. Target system administrators are not authorized to add BI analysis authorization in the IT Shop. |
To add a BI analysis authorization to the IT Shop
- Select the category SAP R/3 | BI analysis authorizations (non role-based login)
- OR -
Select the category Entitlements | SAP BI analysis authorizations (role-based login
.
- Select the BI analysis authorization in the result list.
- Select Add to IT Shop in the task view.
- Assign the BI analysis authorization to the IT Shop shelves in Add assignments.
- Save the changes.
To remove a BI analysis authorization from individual IT Shop shelves.
- Select the category SAP R/3 | BI analysis authorizations (non role-based login)
- OR -
Select the category Entitlements | SAP BI analysis authorizations (role-based login
.
- Select the BI analysis authorization in the result list.
- Select Add to IT Shop in the task view.
- Remove the BI analysis authorization from the IT Shop shelves in Remove assignments.
- Save the changes.
To remove a BI analysis authorization from all IT Shop shelves.
- Select the category SAP R/3 | BI analysis authorizations (non role-based login)
- OR -
Select the category Entitlements | SAP BI analysis authorizations (role-based login
.
- Select the BI analysis authorization in the result list.
- Select Remove from all shelves (IT Shop) in the task view.
- Confirm the security prompt with Yes.
- Click OK.
This removes the BI analysis authorization from all One Identity Manager Service shelves. All requests and assignment requests with this BI analysis authorization are canceled in the process.
For more detailed information about request from company resources through the IT Shop, see the One Identity Manager IT Shop Administration Guide.
Related Topics
Additional Tasks for BI Analysis Authorizations
After you have entered the master data, you can apply different tasks to it. The task view contains different forms with which you can run the following tasks.
Overview of a BI Analysis Authorization
Overview of a BI Analysis Authorization
You can view the most important data about a BI analysis authorization on the overview formula.
To obtain an overview of BI analysis authorizations
- Select the category | BI analysis authorizationsSAP R/3.
- Select the BI analysis authorization in the result list.
- Select SAP BI analysis authorization overview in the task view.
General Master Data for a BI User Account
General Master Data for a BI User Account
Table 4: Configuration Parameters for Risk Assessment of BI User Accounts
QER\CalculateRiskIndex |
Preprocessor relevant configuration parameter controlling system components for calculating an employee's risk index. Changes to the parameter require recompiling the database.
If the parameter is set, values can be entered and calculated for the risk index. |
You can view the following data for BI user accounts.
Table 5: BI User Account Master Data
User account |
BI user account identifier.
All SAP user accounts with the same identifier automatically obtain the BI analysis authorizations, which are assigned to this BI user account if they belong to the this client's system. |
System |
Unique system ID. |
Canonical name |
The BI user account's canonical name. The canonical name is mapped through the SAP connector. |
Distinguished name |
Distinguished name of the BI account. The distinguished name is found using a template. |
Risk index (calculated) |
Maximum risk index values for all assigned BI analysis authorizations. This property is only visible if the configuration parameter "QER\CalculateRiskIndex" is set. For more detailed information, see the .One Identity Manager Risk Assessment Administration Guide |
User Account exists |
Specifies whether an SAP user account with the name as this BI user account exists in at least one client of the given system (SAPUserAccnt equals SAPB_WUser-Accnt). |