SAP IDM 8.0 Provisioning

[Former Member]

Hi All,

I've installed SAP IDM 8.0 on MS SQL server and created repositories to SAP ECC and BW systems and able to see all the Roles available in the systems.

Am able to manually create a user on IDM server and able to push it to ECC server with some selected roles.

Now i need to create business roles in IDM server and need to add selective technical roles to that business role.

Kindly let me know if any one of you have done the IDM provisioning and automation.

Thanks,

Gangadhar

[jaisuryan]

Hi Ambati,

Have you checked the Config guide?

SAP Identity Management Configuration Guide - SAP Library

Above link points to the Role maintenance in SAP IDM. Thanks.

Kind regards,

Jai

[Former Member]

Hi Jai,

Thanks for the link. 

Actually as per the clients requirement:

1) I need to create a container (kind of) or Role which can accommodate technical roles present in the target systems like ECC, BW etc.

2) From IDM i should be able to create a user and assign those roles to the user as per the user's Designation or Position. 

3) Later i need to schedule jobs in IDM to check if any new user creations are present and it should push the users to the target systems and provision them as per the IDM roles.

Hope i can achieve this by creating the IDM Roles and adding up the technical roles.

Correct me if my understanding is wrong.  Appreciate if you can share any approach for this, which i can implement.

Thanks,

Gangadhar

[jaisuryan]

Hi Gangadhar,

Your scenario and questions are generic and vague.

Creating container (Roles) and assigning technical roles (privileges), creating users and assiging those roles, connection SAP IDM and SAP HR everything is explained in the config guide (link I provided).

Please read thru the document and let us know if you are looking for something in particular. Thanks.

Kind regards,

Jai

[Former Member]

Hi Jai,

Thank you for the link.

I know my questions are kind of basic as this is the first time am working on IDM system.

I've gone through the link and have created a role and assigned the target system technical roles and am able to push them to the idm test users.

Here is what am looking for:

-----------------------------------------

The client is using a ticketing tool and the service desk has a set of predefined Profiles with associated technical roles.  

Now i would need to know how to schedule the jobs in IDM where it can read any external feed (probably an excel file with Profiles/Business roles and the users) and IDM can create or push the technical roles to those users.

Thanks,

Gangadhar

[Former Member]

Hi Ambati,

you can define business roles hierarchy in IDM and each business roles can consist of the technical roles and other business roles. When you assign those in IDM - on the target system all underlying technical roles will be provisioned.

You can select the technical roles and add them to your business role in the admin UI Assignments tab and Hierarchy tab  e.g. - http://[host]:50000/idm/admin

You can do automation  using dynamic groups or contexts also  based on certain attributes you can define workflows and scripts to automate.

Did i get to the point of your question? Or you can specify with more details what you want to achieve.

Best wishes,

Fedya

[Former Member]

Hi Fedya,

Thanks for the link.

Actually as per the clients requirement:

1) I need to create a container (kind of) or Role which can accommodate technical roles present in the target systems like ECC, BW etc.

2) From IDM i should be able to create a user and assign those roles to the user as per the user's Designation or Position. 

3) Later i need to schedule jobs in IDM to check if any new user creations are present and it should push the users to the target systems and provision them as per the IDM roles.

Hope i can achieve this by creating the IDM Roles and adding up the technical roles.

Correct me if my understanding is wrong.  Appreciate if you can share any approach for this, which i can implement.

Thanks,

Gangadhar