Chat now with support
Chat with Support

Identity Manager 8.0 - Administration Guide for the SAP R/3 Compliance Add-on

SAP Functions and Identity Audit Setting up a Synchronization Project for Synchronizing SAP Authorization Objects Base Data for SAP Functions Finding Non-compliant Authorizations Setting up SAP Functions Compliance Rules for SAP Functions Mitigating Controls Appendix: Configuration Parameters for SAP Functions Appendix: Default Project Templates for the SAP R/3 Compliance Add-on Module Appendix: Referenced SAP R/3 Tables and BAPI Calls

Enabling Working Copies

Enabling Working Copies

SAP authorizations are only checked on the basis of active SAP functions. When you enable the working copy, the changes are transferred to the function definition. An active function definition is added to a new working copy.

To transfer changes from a working copy to a function definition

  1. Select the category Identity Audit | SAP functions | Function definition working copies.
  2. Select the function definition in the result list.
  3. Select Enable working copy in the task view.
  4. Confirm the security prompt with OK.

Mitigating Controls

Mitigating Controls

Mitigating controls can be stored with SAP functions. These reduce the effects on the company when SAP users match with SAP functions. At the same time, you specify how to deal with SAP users or SAP groups that match the SAP function. For example, changing a user assignment to an SAP role in the SAP system can be used as a mitigating control for an SAP function.

Mitigating controls can also be used as controlling measures for compliance rules. Mitigating controls assigned to the SAP functions for testing are automatically transferred into compliance rules about SAP functions.

Prerequisites:

  • Active rules are assigned to a functional area and a department.
  • The SAP functions for testing are assigned to the same functional area and then associated variable set of the same department.

To edit mitigating controls

  • Set the configuration parameter "QER\CalculateRiskIndex" in the Designer.
Detailed information about this topic

Assigning Mitigating Controls

Assigning Mitigating Controls

To assign mitigating controls to a function definition

  1. Select the category Identity Audit | SAP functions | Function definition working copies.
  2. Select the working copy in the result list.
  3. Select Assign mitigating controls from the task list.
  4. Double-click on a mitigating control in Add assignments to assign it.

    – OR –

    Double-click on a mitigating control in Remove assignments to remove the assignment.

  5. Save the changes.

Creating Mitigating Controls

Creating Mitigating Controls

To create a mitigating control for SAP functions

  1. Select the category Identity Audit | SAP functions | Function definition working copies.
  2. Select a working copy in the result list.
  3. Select Assign mitigating controls from the task list.
  4. Select Create mitigating controls from the task list.
  5. Enter the master data for the mitigating control.
  6. Save the changes.
  7. Select the task Assign function definitions.
  8. Double-click on the function definitions you want to assign in Add assignments.
  9. Save the changes.
Detailed information about this topic
Related Documents