Chat now with support
Chat with Support

Identity Manager 9.2.1 - Administration Guide for Connecting to SAP R/3

Managing SAP R/3 environments Setting up SAP R/3 synchronization Basic data for managing an SAP R/3 environment Basic data for user account administration SAP systems SAP clients SAP user accounts SAP groups, SAP roles, and SAP profiles SAP products Providing system measurement data Reports about SAP objects Removing a Central User Administration Troubleshooting an SAP R/3 connection Configuration parameters for managing an SAP R/3 environment Default project templates for synchronizing an SAP R/3 environment Referenced SAP R/3 table and BAPI calls Example of a schema extension file

Assigning SAP groups, SAP roles, and SAP profiles to business roles

Installed modules: Business Roles Module

You assign groups, roles, and profiles to business roles in order to assign them to user accounts over business roles.

To assign a group to a business role (non role-based login)

  1. Select the SAP R/3 > Groups category.
  2. Select the group in the result list.
  3. Select the Assign business roles task.
  4. In the Add assignments pane, assign business roles.

    - OR -

    In the Remove assignments pane, remove business roles.

  5. Save the changes.

To assign a role to a business role (non role-based login)

  1. Select the SAP R/3 > Roles category.
  2. Select the role in the result list.
  3. Select the Assign business roles task.
  4. In the Add assignments pane, assign business roles.

    - OR -

    In the Remove assignments pane, remove business roles.

  5. Save the changes.

To assign a profile to a business role (non role-based login)

  1. Select the SAP R/3 > Profiles category.
  2. Select a profile in the result list.
  3. Select the Assign business roles task.
  4. In the Add assignments pane, assign business roles.

    - OR -

    In the Remove assignments pane, remove business roles.

  5. Save the changes.

To assign groups, roles, or profiles to a business role (non role-based login)

  1. Select the Business roles > <Role class> category.
  2. Select the business role in the result list.
  3. Select the Assign SAP groups task.

    - OR -

    Select the Assign SAP roles task.

    - OR -

    Select the Assign SAP profiles task.

  4. In the Add assignments pane, assign groups, roles, or profiles.

    - OR -

    In the Remove assignments pane, remove the groups, roles, or profiles.

  5. Save the changes.
Related topics

Assigning SAP user accounts directly to SAP groups and SAP profiles

To react quickly to special requests, you can assign groups and profiles directly to user accounts.

NOTE:

  • Only profiles that are not assigned to SAP roles can be assigned to user accounts.
  • Generated profiles cannot be assigned to user accounts.

The following applies if user accounts are managed by CUAClosed:

  • The group (the profile) is assigned to the central system, or

  • The group's (the profile's) client is assigned as a child system to the user accounts

  • A group or profile can also be directly assigned to a user account if the client's assignment to the user account is marked as outstanding. This removes the outstanding mark.

To assign a group directly to user accounts

  1. Select the SAP R/3 > Groups category.

  2. Select the group in the result list.

  3. Select the Assign user accounts task.

  4. Assign user accounts in Add assignments.

    - OR -

    Remove user accounts from Remove assignments.

  5. Save the changes.

To assign a profile directly to user accounts

  1. Select the SAP R/3 > Profiles category.

  2. Select a profile in the result list.

  3. Select the Assign user accounts task.

  4. Assign user accounts in Add assignments.

    - OR -

    Remove user accounts from Remove assignments.

  5. Save the changes.
Related topics

Assigning SAP user accounts directly to SAP roles

To react quickly to special requests, you can assign roles directly to user accounts.

The following applies if user accounts are managed by CUAClosed:

  • The role is assigned to the central system, or

  • The role's client is assigned as a child system to the user accounts.

    NOTE: Roles can also be directly assigned to a user account if the client's assignment to the user account is marked as outstanding. This removes the outstanding mark.

To assign a role directly to user accounts

  1. Select the SAP R/3 > Roles category.

  2. Select the role in the result list.

  3. Select the Assign user accounts task.

To assign a role to a user account

  1. Click Add.

    This inserts a new row in the table.

  2. Select the user account you want to assign to the role from the User account menu.

  3. Enter a validity period for the role assignment in the Valid from and Valid until fields, if that applies.

  4. Enter another user account if required.

  5. Save the changes.

To edit a role assignment

  1. Select the role assignment you want to edit in the table. Edit the validity period.

  2. Save the changes.

To remove a role assignment.

  1. Select the role assignment you want to remove in the table.

  2. Click Delete.

  3. Save the changes.
Related topics

Adding SAP groups, SAP roles, and SAP profiles to system roles

Installed modules: System Roles Module

Groups, roles, and profiles can be added to different system roles. If you assign a system role to identities, all SAP user accounts owned by these identities inherit the groups, roles, and profiles. System roles that exclusively contain SAP groups, roles, or profiles can be labeled with "SAP product". Groups, roles, and profiles can also be added to system roles that are not SAP products.

NOTE: Only profiles that are not assigned to an SAP role can be assigned to system roles.
NOTE: Groups, roles, and profiles with Only use in IT Shop can only be assigned to system roles that also have this option set. For more information about providing system roles in the IT Shop, see the One Identity Manager System Roles Administration Guide.

To assign a group to system roles

  1. Select the SAP R/3 > Groups category.
  2. Select the group in the result list.
  3. Select the Assign system roles task.

  4. In the Add assignments pane, assign system roles.

    TIP: In the Remove assignments pane, you can remove assigned system roles.

    To remove an assignment

    • Select the system role and double-click .

  5. Save the changes.

To assign a role to system roles

  1. Select the SAP R/3 > Roles category.
  2. Select the role in the result list.
  3. Select the Assign system roles task.

  4. In the Add assignments pane, assign system roles.

    TIP: In the Remove assignments pane, you can remove assigned system roles.

    To remove an assignment

    • Select the system role and double-click .

  5. Save the changes.

To assign a profile to system roles

  1. Select the SAP R/3 > Profiles category.
  2. Select a profile in the result list.
  3. Select the Assign system roles task.

  4. In the Add assignments pane, assign system roles.

    TIP: In the Remove assignments pane, you can remove assigned system roles.

    To remove an assignment

    • Select the system role and double-click .

  5. Save the changes.
Detailed information about this topic
Related topics
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating