Chat now with support
Chat with Support

Identity Manager 9.2.1 - Administration Guide for Connecting to SAP R/3

Managing SAP R/3 environments Setting up SAP R/3 synchronization Basic data for managing an SAP R/3 environment Basic data for user account administration SAP systems SAP clients SAP user accounts SAP groups, SAP roles, and SAP profiles SAP products Providing system measurement data Reports about SAP objects Removing a Central User Administration Troubleshooting an SAP R/3 connection Configuration parameters for managing an SAP R/3 environment Default project templates for synchronizing an SAP R/3 environment Referenced SAP R/3 table and BAPI calls Example of a schema extension file

Assigning SAP products to identities

SAP products can be assigned directly or indirectly to identities. In the case of indirect assignment, identities and SAP products are arranged in hierarchical roles. The number of SAP products assigned to an identity is calculated from the position in the hierarchy and the direction of inheritance.

If you add an identity to roles and that identity owns a user account, the user account is added to all groups, roles, or profiles included in the SAP products owned by the identity. The groups, roles, or profiles are not inherited if the SAP product is disabled or if the share date is still in the future.

Furthermore, SAP products can be assigned to identities through IT Shop requests. SAP products can be assigned through IT Shop requests by adding identities to a shop as customers. All SAP products are assigned to this shop can be requested by the customers. Requested SAP products are assigned to the identities after approval is granted.

Prerequisites for indirect assignment of SAP groups, roles, and profiles through SAP products to user accounts are:

  • Assignment of system roles, identities, groups, roles, and profiles is permitted for role classes (departments, cost centers, locations, or business roles).
  • The user accounts are labeled with the Groups can be inherited, Profiles can be inherited, and Roles can be inherited options.
  • The user accounts, groups, roles, and profiles belong to the same SAP client.

For more information see the following guides:

Topic

Guide

Basic principles for assigning and inheriting company resources

One Identity Manager Identity Management Base Module Administration Guide

One Identity Manager Business Roles Administration Guide

Assigning company resources through IT Shop requests

One Identity Manager IT Shop Administration Guide

System roles

One Identity Manager System Roles Administration Guide

Detailed information about this topic
Related topics

Assigning SAP products to organizations

Assign SAP products to departments, cost centers, and locations in order to assign identities to them through these organizations.

To assign an SAP product to departments, cost centers, or locations

  1. Select the SAP R/3 > Products category.
  2. Select the SAP product in the result list.
  3. Select the Assign organizations task.
  4. In the Add assignments pane, assign the organizations:
    • On the Departments tab, assign departments.
    • On the Locations tab, assign locations.
    • Assign cost centers on the Cost centers tab.

    - OR -

    Remove the organizations in the Remove assignments pane.

  5. Save the changes.
Related topics

Assigning SAP products to business roles

Installed modules: Business Roles Module

You assign SAP products to business roles in order to assign them to user accounts over business roles.

To assign an SAP product to business roles

  1. Select the SAP R/3 > Products category.
  2. Select the SAP product in the result list.
  3. Select the Assign business roles task.
  4. In the Add assignments pane, assign business roles.

    - OR -

    In the Remove assignments pane, remove business roles.

  5. Save the changes.
Related topics

Assigning SAP products directly to identities

You can assign SAP products directly to identities. All groups, roles, and profiles are assigned to this SAP product can be inherited by these identities.

To assign an SAP product directly to identities

  1. Select the SAP R/3 > Products category.
  2. Select the SAP product in the result list.
  3. Select the Assign to identities task.
  4. In the Add assignments pane, assign identities.

    - OR -

    In the Remove assignments pane, remove identities.

  5. Save the changes.
Related topics
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating