立即与支持人员聊天
与支持团队交流

Identity Manager 9.1.3 - Administration Guide for Connecting to SAP R/3

Managing SAP R/3 environments Setting up SAP R/3 synchronization Basic data for managing an SAP R/3 environment Basic data for user account administration SAP systems SAP clients SAP user accounts SAP groups, SAP roles, and SAP profiles SAP products Providing system measurement data Reports about SAP objects Removing a Central User Administration Troubleshooting an SAP R/3 connection Configuration parameters for managing an SAP R/3 environment Default project templates for synchronizing an SAP R/3 environment Referenced SAP R/3 table and BAPI calls Example of a schema extension file

Assigning extended properties to SAP groups, SAP roles, and SAP profiles

Extended properties are meta objects, such as operating codes, cost codes, or cost accounting areas that cannot be mapped directly in One Identity Manager.

To specify extended properties for a group

  1. Select the SAP R/3 > Groups category.
  2. Select the group in the result list.
  3. Select the Assign extended properties task.
  4. In the Add assignments pane, assign extended properties.

    - OR -

    In the Remove assignments pane, remove extended properties.

  5. Save the changes.

To specify extended properties for a role

  1. Select the SAP R/3 > Roles category.
  2. Select the role in the result list.
  3. Select the Assign extended properties task.
  4. Assign extended properties in Add assignments.

    - OR -

    Remove extended properties in Remove assignments .

  5. Save the changes.

To specify extended properties for a profile

  1. Select the SAP R/3 > Profiles category.
  2. Select a profile in the result list.
  3. Select the Assign extended properties task.
  4. Assign extended properties in Add assignments.

    - OR -

    Remove extended properties in Remove assignments .

  5. Save the changes.

Showing SAP authorizations

You can view authorization objects and authorizations of One Identity Manager roles and profiles in SAP. All single profiles with their associated authorization objects and fields are displayed in a hierarchical overview.

To display role authorizations

  1. Select the SAP R/3 > Roles category.
  2. Select the role in the result list.
  3. Select the Show SAP authorizations task.

To display profile authorizations

  1. Select the SAP R/3 > Profiles category.
  2. Select a profile in the result list.
  3. Select the Show SAP authorizations task.

Validity period of role assignments

You can enter a validity period for assigning SAP roles to user accounts. If no validity period is given to the role assignments, they are allocated the following validity dates by default:

  • Valid from: 1900-01-01
  • Valid to : 9999-12-31

These role assignments are therefore unlimited.

The SAPUserInSAPRole table contains all role assignments, limited, and unlimited.

The HelperSAPUserInSAPRole table only contains current valid role assignments. The Daily calculation of SAP user accounts assignments to SAP roles schedule controls the calculation of this table.

Detailed information about this topic
Related topics

Assigning the validity period of direct role assignments

Direct assignments can occur in two different ways:

  1. Synchronizing role assignments

    The Valid from and Valid to columns are taken into account in the default mapping. Synchronization writes the validity period of role assignments into the One Identity Manager database.

  2. Direct assignment of SAP roles to user accounts in the Manager

    A validity period can be entered for direct assignment of SAP roles to user accounts. Valid from and Valid to dates are provisioned in the target system.

Related topics
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级