cancel
Showing results for 
Search instead for 
Did you mean: 

Role Provisioning

Former Member
0 Kudos

How to provision the role to the SAP system, Means, We have a technical role that sits in sap system. How can we do this role provisioning along with the user provisioning.

Thanks

Regards

Kasi

Accepted Solutions (1)

Accepted Solutions (1)

Former Member
0 Kudos

Hi Kasi,

First import the roles (and users if you like), then assign them in the workflow to newly created users / already existing users from the sap system.

The Adapter, which uses SAP NW IdM to the backend is JCO for Web AS ABAP. As input parameter for the provisioning to the sap system, the userid and all the names of the assigned technical roles are used. It's useful to have all assignments imported in SAP NW IdM before you provision, because other assigned roles for the user in the sap system are overwritten.

The provided SAP Provisioning Framework gives you a compley task structure, you only have to modify some parameters. Please have a look also at this thread:

Best regards,

Nils

Former Member
0 Kudos

Hi Nils,

First of all Thanks for the reply.... Let me paraphrase your reply,

Do the initial Load of all those ABAP roles in SAP system.

Connect the backend system using Jco connector.

Assign them in the workflow to do the provisioning. Is it right?

Also if new role created in the backend system how it will get updated in the server?

Is there any default job that will run periodically?

Any possibilities to implement it and integrate it with GRC?

Edited by: Kasivinodh Kumar Shanmuganathan on Jun 26, 2008 12:50 PM

Former Member
0 Kudos

Hi Kasi,

the configuration guide about the SAP Provisioning Framework covers all these tasks in detail. Also have a look at https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/f0ad23d3-3664-2a10-8aa7-e9c3c861....

In my last reply I wasn't sure if you wanted to know details about the connection between SAP IdM and the Web AS ABAP. That's why I mentioned how it's implemented in SAP NW IdM. For the connection you don't need to care about JCO and just need to fill in some parameters in SAP NW IdM (in the so-called repository). The steps you mentioned are right, except the connection, which is automatically established with the parameters from the repository for the initial load and the provisioning.

You can set up the jobs to run periodically (e.g. every night) - there's a flexible schedular in the SAP NW IdM. The SAP provisioning framework provides update jobs, which are similar to the initial loads.

For GRC, there's another framework, with the according configuration guide: https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/e08e21ba-dffa-2a10-5da7-c9c1d46d...

Best regards,

Nils

Former Member
0 Kudos

Thanks Nils,

This is all I wanted......

Thanks Again...

Kasi

Answers (0)