Chat now with support
Chat with Support

Identity Manager 8.2 - Administration Guide for Connecting to SAP R/3

Managing SAP R/3 environments Setting up SAP R/3 synchronization Basic data for managing an SAP R/3 environment Basic data for user account administration SAP systems SAP clients SAP user accounts SAP groups, SAP roles, and SAP profiles SAP products Providing system measurement data Reports about SAP objects Removing a Central User Administration Configuration parameters for managing an SAP R/3 environment Default project templates for synchronizing an SAP R/3 environment Referenced SAP R/3 table and BAPI calls Example of a schema extension file

Assigning SAP groups, SAP roles, and SAP profiles to organizations

Assign groups, roles, and profiles to departments, cost centers, and locations in order to assign user accounts to them through these organizations.

To assign a group to departments, cost centers, or locations (non role-based login)

  1. Select the SAP R/3 > Groups category.
  2. Select the group in the result list.
  3. Select the Assign organizations task.
  4. In the Add assignments pane, assign the organizations.
    • Assign departments on the Departments tab.
    • Assign locations on the Locations tab.
    • Assign cost centers on the Cost centers tab.

    - OR -

    Remove the organizations in the Remove assignments pane.

  5. Save the changes.

To assign a role to departments, cost centers, or locations (non role-based login)

  1. Select the SAP R/3 > Roles category.
  2. Select the role in the result list.
  3. Select the Assign organizations task.
  4. In the Add assignments pane, assign the organizations.
    • Assign departments on the Departments tab.
    • Assign locations on the Locations tab.
    • Assign cost centers on the Cost centers tab.

    - OR -

    Remove the organizations in the Remove assignments pane.

  5. Save the changes.

To assign a profile to departments, cost centers, or locations (non role-based login)

  1. Select the SAP R/3 > Profiles category.
  2. Select a profile in the result list.
  3. Select the Assign organizations task.
  4. In the Add assignments pane, assign the organizations.
    • Assign departments on the Departments tab.
    • Assign locations on the Locations tab.
    • Assign cost centers on the Cost centers tab.

    - OR -

    Remove the organizations in the Remove assignments pane.

  5. Save the changes.

To assign groups, roles, or profiles to departments, cost centers, or locations (non role-based login)

  1. Select the Organizations > Departments category.

    - OR -

    Select the Organizations > Cost centers category.

    - OR -

    Select the Organizations > Locations category.

  2. Select the department, cost center, or location in the result list.
  3. Select the Assign SAP groups task.

    - OR -

    Select the Assign SAP roles task.

    - OR -

    Select the Assign SAP profiles task.

  4. In the Add assignments pane, assign groups, roles, or profiles.

    - OR -

    In the Remove assignments pane, remove the groups, roles, or profiles.

  5. Save the changes.
Related topics

Assigning SAP groups, SAP roles, and SAP profiles to business roles

Installed modules: Business Roles Module

You assign groups, roles, and profiles to business roles in order to assign them to user accounts over business roles.

To assign a group to a business role (non role-based login)

  1. Select the SAP R/3 > Groups category.
  2. Select the group in the result list.
  3. Select the Assign business roles task.
  4. In the Add assignments pane, assign business roles.

    - OR -

    In the Remove assignments pane, remove business roles.

  5. Save the changes.

To assign a role to a business role (non role-based login)

  1. Select the SAP R/3 > Roles category.
  2. Select the role in the result list.
  3. Select the Assign business roles task.
  4. In the Add assignments pane, assign business roles.

    - OR -

    In the Remove assignments pane, remove business roles.

  5. Save the changes.

To assign a profile to a business role (non role-based login)

  1. Select the SAP R/3 > Profiles category.
  2. Select a profile in the result list.
  3. Select the Assign business roles task.
  4. In the Add assignments pane, assign business roles.

    - OR -

    In the Remove assignments pane, remove business roles.

  5. Save the changes.

To assign groups, roles, or profiles to a business role (non role-based login)

  1. Select the Business roles > <Role class> category.
  2. Select the business role in the result list.
  3. Select the Assign SAP groups task.

    - OR -

    Select the Assign SAP roles task.

    - OR -

    Select the Assign SAP profiles task.

  4. In the Add assignments pane, assign groups, roles, or profiles.

    - OR -

    In the Remove assignments pane, remove the groups, roles, or profiles.

  5. Save the changes.
Related topics

Assigning SAP user accounts directly to SAP groups and SAP profiles

To react quickly to special requests, you can assign groups and profiles directly to user accounts.

NOTE:

  • Only profiles that are not assigned to SAP roles can be assigned to user accounts.
  • Generated profiles cannot be assigned to user accounts.

The following applies if user accounts are managed by CUAClosed:

  • The group (the profile) is assigned to the central system, or

  • The group's (the profile's) client is assigned as a child system to the user accounts

  • A group or profile can also be directly assigned to a user account if the client's assignment to the user account is marked as outstanding. This removes the outstanding mark.

To assign a group directly to user accounts

  1. Select the SAP R/3 > Groups category.

  2. Select the group in the result list.

  3. Select the Assign user accounts task.

  4. Assign user accounts in Add assignments.

    - OR -

    Remove user accounts from Remove assignments.

  5. Save the changes.

To assign a profile directly to user accounts

  1. Select the SAP R/3 > Profiles category.

  2. Select a profile in the result list.

  3. Select the Assign user accounts task.

  4. Assign user accounts in Add assignments.

    - OR -

    Remove user accounts from Remove assignments.

  5. Save the changes.
Related topics

Assigning SAP user accounts directly to SAP roles

To react quickly to special requests, you can assign roles directly to user accounts.

The following applies if user accounts are managed by CUAClosed:

  • The role is assigned to the central system, or

  • The role's client is assigned as a child system to the user accounts.

    NOTE: Roles can also be directly assigned to a user account if the client's assignment to the user account is marked as outstanding. This removes the outstanding mark.

To assign a role directly to user accounts

  1. Select the SAP R/3 > Roles category.

  2. Select the role in the result list.

  3. Select the Assign user accounts task.

To assign a role to a user account

  1. Click Add.

    This inserts a new row in the table.

  2. Select the user account you want to assign to the role from the User account menu.

  3. Enter a validity period for the role assignment in the Valid from and Valid until fields, if that applies.

  4. Enter another user account if required.

  5. Save the changes.

To edit a role assignment

  1. Select the role assignment you want to edit in the table. Edit the validity period.

  2. Save the changes.

To remove a role assignment.

  1. Select the role assignment you want to remove in the table.

  2. Click Delete.

  3. Save the changes.
Related topics
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating