Chat now with support
Chat with Support

Identity Manager 8.1.5 - Administration Guide for SAP R/3 Analysis Authorizations Add-on

Adding BI analysis authorizations to the IT Shop

When you assign a BI analysis authorization to an IT Shop shelf, it can be requested by the shop customers. To ensure it can be requested, further prerequisites need to be guaranteed:

  • The BI analysis authorization must be labeled with the IT Shop option.

  • The BI analysis authorization must be assigned a service item.

    TIP: In the Web Portal, all products that can be requested are grouped together by service category. To make the BI analysis authorization easier to find in the Web Portal, assign a service category to the service item.

  • If you only want the BI analysis authorization to be assigned to employees through IT Shop requests, the BI analysis authorization must also be labeled with the Use only in IT Shop option. Direct assignment to hierarchical roles or user accounts is no longer permitted.

NOTE: With role-based login, the IT Shop administrators can assign BI analysis authorizations to IT Shop shelves. Target system administrators are not authorized to add BI analysis authorizations to IT Shop.

To add a BI analysis authorization to the IT Shop.

  1. In the Manager select SAP R/3 | BI analysis authorizations (non role-based login) category.

    - OR -

    In the Manager, select the Entitlements | SAP BI analysis authorizations (role-based login) category.

  2. In the result list, select the BI analysis authorization.
  3. Select the Add to IT Shop task.
  4. In the Add assignments pane, the BI analysis authorization to the IT Shop shelves.
  5. Save the changes.

To remove, a BI analysis authorization from individual shelves of the IT Shop

  1. In the Manager select SAP R/3 | BI analysis authorizations (non role-based login) category.

    - OR -

    In the Manager, select the Entitlements | SAP BI analysis authorizations (role-based login) category.

  2. In the result list, select the BI analysis authorization.
  3. Select the Add to IT Shop task.
  4. In the Remove assignments pane, the BI analysis authorization from the IT Shop shelves.
  5. Save the changes.

To remove, a BI analysis authorization from all shelves of the IT Shop

  1. In the Manager, select SAP R/3 | BI analysis authorizations (non role-based login) category.

    - OR -

    In the Manager, select the Entitlements | SAP BI analysis authorizations (role-based login) category.

  2. In the result list, select the BI analysis authorization.
  3. Select the Remove from all shelves (IT Shop) task.
  4. Confirm the security prompt with Yes.
  5. Click OK.

    The BI analysis authorization is removed from all shelves by the One Identity Manager Service. All requests and assignment requests with this BI analysis authorization are canceled.

For more detailed information about requesting company resources through the IT Shop, see the One Identity Manager IT Shop Administration Guide.

Related topics

Additional tasks for BI analysis authorizations

After you have entered the master data, you can run the following tasks.

Overview of the BI analysis authorization

You can view the most important data about a BI analysis authorization on the overview formula.

To obtain an overview of BI analysis authorizations

  1. Select the SAP R/3 | BI analysis authorizations category.
  2. Select the BI analysis authorization in the result list.
  3. Select the SAP BI analysis authorization overview task.

General master data for a BI user account

Table 4: Configuration parameters for risk assessment of BI user accounts
Configuration parameter Effect when set
QER | CalculateRiskIndex Preprocessor relevant configuration parameter controlling system components for calculating an employee's risk index. Changes to the parameter require recompiling the database.

If the parameter is enabled, values for the risk index can be entered and calculated.

You can view the following data for BI user accounts.

Table 5: BI user account master data
Property Description
User account BI user account identifier.

All SAP user accounts with the same identifier automatically obtain the BI analysis authorizations assigned to this BI user account if they belong to a client in this system.

system Unique system ID.
Canonical name The BI user account's canonical name. The canonical name is mapped through the SAP connector.
Distinguished name Distinguished name of the BI account. The distinguished name is found using a template.

Risk index (calculated)

Maximum risk index value of all assigned BI analysis authorizations. The property is only visible if the QER | CalculateRiskIndex configuration parameter is set. For detailed information, see the One Identity Manager Risk Assessment Administration Guide.

User Account exists Specifies whether an SAP user account with the name of this BI user account exists in at least one client of the given system (SAPUserAccnt equals SAPB_WUser-Accnt).
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating