Chat now with support
Chat with Support

Identity Manager 8.1.5 - Administration Guide for Connecting to SAP R/3

Managing SAP R/3 environments Setting up SAP R/3 synchronization Basic data for managing an SAP R/3 environment Basic data for user account administration SAP systems SAP clients SAP user accounts SAP groups, SAP roles, and SAP profiles SAP products Providing system measurement data Reports about SAP systems Configuration parameters for managing an SAP R/3 environment Default project templates for synchronizing an SAP R/3 environment Referenced SAP R/3 table and BAPI calls Example of a schema extension file

Assigning SAP roles directly to an SAP user account

Roles can be assigned directly or indirectly to a user account. Indirect assignment is carried out by allocating the employee and roles in hierarchical roles, like departments, cost centers, locations, or business roles. If the employee has an SAP user account, the SAP roles in the hierarchical roles are inherited by the user account.

To react quickly to special requests, you can assign roles directly to the user account.

If the user account is managed through a CUAClosed, roles can be selected from all clients assigned to this user account.

NOTE: Roles can also be directly assigned to a user account if the client's assignment to the user account is marked as outstanding. This removes the outstanding mark.

To assign roles directly to user accounts

  1. Select the SAP R/3 | User accounts category.
  2. Select the user account in the result list.
  3. Select the Assign roles task.

To assign a role

  1. Click Add.

    This inserts a new row in the table.

  2. Select the role you want to assign from the Role menu.
  3. Enter a validity period for the role assignment in the Valid from and Valid until fields, if that applies.
  4. Assign more roles as necessary.
  5. Save the changes.

To edit a role assignment

  1. Select the role assignment you want to edit in the table. Edit the validity period.
  2. Save the changes.

To remove a role assignment.

  1. Select the role assignment you want to remove in the table.
  2. Click Delete.
  3. Save the changes.
Related topics

Assigning structural profiles

Installed modules: SAP R/3 Structural Profiles Add-on Module

Structural profiles can be assigned directly or indirectly to a user account. Indirect assignment is carried out by allocating the employee and structural profiles in hierarchical roles, like departments, cost centers, locations, or business roles. If the employee has an SAP user account, the structural profiles in the role are inherited by the user account.

To react quickly to special requests, you can assign structural profiles directly to the user account.

To assign structural profiles directly to user accounts

  1. Select the SAP R/3 | User accounts category.
  2. Select the user account in the result list.
  3. Select the Assign structural profiles task.

To assign a structural profile

  1. Click Add.

    This inserts a new row in the table.

  2. Select the structural profile to assign from the Structural profile menu.

  3. If applicable, enter a validity period for the profile assignment in the Valid from and Valid until fields.
  4. Assign more structural profiles as necessary.
  5. Save the changes.

To edit a profile assignment

  1. Select the profile assignment you want to edit in the table. Edit the validity period.
  2. Save the changes.

To remove a profile assignment

  1. Select the profile assignment you want to remove in the table.
  2. Click Delete.
  3. Save the changes.
Detailed information about this topic
  • One Identity Manager Administration Guide for SAP R/3 Structural Profiles Add-on

Granting access to clients of a central user administration

User accounts, administered through central user administration (CUAClosed), have control over access permissions in several clients. You specify the client in which each user account obtains its access permissions. Clients can be assigned directly and indirectly. For indirect assignments, create account definitions for the clients and assign these to hierarchical roles. For more information, see Central user administration in One Identity Manager.

To react quickly to special requests, you can assign the clients directly to a user account. You can select the central system and the child system in this process. Only SAP roles or profiles from this client can be assigned to a user account.

This task is only available if the client of the selected user account is labeled as central system.

To assign a user account directly to a client

  1. Select the SAP R/3 | User accounts category.
  2. Select the user account in the result list.
  3. Select the Assign access to clients task.

To assign a client

  1. Click Add.

    This inserts a new row in the table.

  2. From the Client menu, select the client in which you want the user account to receive access permissions.

  3. Assign an account definition, if necessary.

  4. Assign more clients, if necessary.

  5. Save the changes.

To edit an assignment

  1. In the table, select the assignment that you want to edit. Edit the account definition's assignment.

  2. Save the changes.

To remove an assignment

  1. In the table, select the assignment that you want to remove.

  2. Click Delete.

  3. Save the changes.

Assigning SAP licenses

NOTE: This task is only available for user account managed through CUAClosed.

SAP licenses in child system and in the central system can be assigned to user account for system measurement. For more information, see Providing system measurement data.

To assign licenses to a user account

  1. Select the SAP R/3 | User accounts category.
  2. Select the user account in the result list.
  3. Select the Assign SAP licenses in client systems task.
  4. Click Add.

    This inserts a new row in the table.

  5. Mark this row. Enter the measurement data.
  6. Save the changes.

To edit a license assignment

  1. Select the SAP R/3 | User accounts category.
  2. Select the user account in the result list.
  3. Select the Assign SAP licenses in client systems task.
  4. Select an assignment in the table.
  1. Edit the measurement data.
  2. Save the changes.

To remove a license assignment

  1. Select the SAP R/3 | User accounts category.
  2. Select the user account in the result list.
  3. Select the Assign SAP licenses in client systems task.
  4. Select an assignment in the table.
  1. Click Delete.
  2. Save the changes.

The following license information is displayed on the form.

Table 53: Measurement data for a centrally administrated user account
Property Description
Recipient client Client containing the user account which is assigned a license. You can select the central system or a assigned child system.
License User account license in the selected client.
License extension License extension for the installed special version. Select the special version ID from the menu.
Country surcharge Additional license fee.
Chargeable system SAP system containing the client to be charged. This field is only shown if "04 (substitute)" or "11 (Multi-client/system)" is entered.
Chargeable client Client containing the user account to be charged. This field is only shown if "04 (substitute)" or "11 (Multi-client/system)" is entered.
Chargeable user account User account to be charged if "04 (substitute)" or "11 (Multi-client/system)" is entered.
Substituted from Time period in which another user account assumes responsibility. This input field is enabled if the active license is set to "04 (substitute)".
Substituted until
Related topics
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating