Chat now with support
Chat with Support

Identity Manager 8.2.1 - Administration Guide for Connecting to SAP R/3

Managing SAP R/3 environments Setting up SAP R/3 synchronization Basic data for managing an SAP R/3 environment Basic data for user account administration SAP systems SAP clients SAP user accounts SAP groups, SAP roles, and SAP profiles SAP products Providing system measurement data Reports about SAP objects Removing a Central User Administration Troubleshooting an SAP R/3 connection Configuration parameters for managing an SAP R/3 environment Default project templates for synchronizing an SAP R/3 environment Referenced SAP R/3 table and BAPI calls Example of a schema extension file

Changing the manage level of SAP user accounts

The default manage level is applied if you create user accounts using automatic employee assignment. You can change a user account manage level later.

To change the manage level for a user account

  1. In the Manager, select the SAP R/3 > User accounts category.

  2. Select the user account in the result list.

  3. Select the Change main data task.

  4. Select the manage level in the Manage level list on the Address tab.

  5. Save the changes.
Related topics

Assigning SAP groups and SAP profiles directly to an SAP user account

Groups and profiles can be assigned directly or indirectly to a user account. Indirect assignment is done by allocating the employee, groups, and profiles to hierarchical roles such as departments, cost centers, locations, or business roles. If the employee has an SAP user account, the groups and profiles in the role are inherited by the user account.

To react quickly to special requests, you can assign groups and profiles directly to the user account. You cannot directly assign groups and profiles that have the Only use in IT Shop option set.

NOTE:

  • Only profiles that are not assigned to SAP roles can be assigned to user accounts.
  • Generated profiles cannot be assigned to user accounts.
  • If the user account is managed through a CUAClosed, groups and profiles can be selected from any clients assigned to this user account.

    Groups and profiles can also be directly assigned to a user account if the client's assignment to the user account is marked as outstanding. This removes the outstanding mark.

To assign groups and profiles directly to user accounts

  1. Select the SAP R/3 > User accounts category.

  2. Select the user account in the result list.

  3. Select one of the following tasks.

    • Assign groups, to assign SAP groups directly.

    • Assign profiles, to assign SAP profiles directly.

  4. In the Add assignments pane, assign the groups or profiles.

    - OR -

    In the Remove assignments pane, remove the groups or profiles.

  5. Save the changes.
Related topics

Assigning SAP roles directly to an SAP user account

Roles can be assigned directly or indirectly to a user account. Indirect assignment is done by allocating the employee and roles to hierarchical roles such as departments, cost centers, locations, or business roles. If the employee has an SAP user account, the SAP roles in the hierarchical roles are inherited by the user account.

To react quickly to special requests, you can assign roles directly to the user account. You cannot directly assign roles that have the Only use in IT Shop option set.

If the user account is managed through a CUAClosed, roles can be selected from all clients assigned to this user account.

NOTE: Roles can also be directly assigned to a user account if the client's assignment to the user account is marked as outstanding. This removes the outstanding mark.

To assign roles directly to user accounts

  1. Select the SAP R/3 > User accounts category.

  2. Select the user account in the result list.

  3. Select the Assign roles task.

To assign a role

  1. Click Add.

    This inserts a new row in the table.

  2. Select the role you want to assign from the Role menu.

  3. Enter a validity period for the role assignment in the Valid from and Valid until fields, if that applies.

  4. Assign more roles as necessary.

  5. Save the changes.

To edit a role assignment

  1. Select the role assignment you want to edit in the table. Edit the validity period.

  2. Save the changes.

To remove a role assignment.

  1. Select the role assignment you want to remove in the table.

  2. Click Delete.

  3. Save the changes.
Related topics

Assigning structural profiles

Installed modules: SAP R/3 Structural Profiles Add-on Module

Structural profiles can be assigned directly or indirectly to a user account. Indirect assignment is done by allocating the employee and structural profiles to hierarchical roles such as departments, cost centers, locations, or business roles. If the employee has an SAP user account, the structural profiles in the role are inherited by the user account.

To react quickly to special requests, you can assign structural profiles directly to the user account.

To assign structural profiles directly to user accounts

  1. In the Manager, select the SAP R/3 > User accounts category.

  2. Select the user account in the result list.

  3. Select the Assign structural profiles task.

To assign a structural profile

  1. Click Add.

    This inserts a new row in the table.

  2. Select the structural profile to assign from the Structural profile menu.

  3. If applicable, enter a validity period for the profile assignment in the Valid from and Valid until fields.

  4. If the assignment temporarily is not active, set Excluded.

  5. Assign more structural profiles as necessary.

  6. Save the changes.

To edit a profile assignment

  1. Select the profile assignment you want to edit in the table.

  2. Edit the Valid until date or the Excluded option.

  3. Save the changes.

To remove a profile assignment

  1. Select the profile assignment you want to remove in the table.

  2. Click Delete.

  3. Save the changes.

For more information about structural profiles, see the One Identity Manager Administration Guide for SAP R/3 Structural Profiles Add-on.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating