on 06-25-2008 10:43 AM
How to provision the role to the SAP system, Means, We have a technical role that sits in sap system. How can we do this role provisioning along with the user provisioning.
Thanks
Regards
Kasi
Hi Kasi,
First import the roles (and users if you like), then assign them in the workflow to newly created users / already existing users from the sap system.
The Adapter, which uses SAP NW IdM to the backend is JCO for Web AS ABAP. As input parameter for the provisioning to the sap system, the userid and all the names of the assigned technical roles are used. It's useful to have all assignments imported in SAP NW IdM before you provision, because other assigned roles for the user in the sap system are overwritten.
The provided SAP Provisioning Framework gives you a compley task structure, you only have to modify some parameters. Please have a look also at this thread:
Best regards,
Nils
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Nils,
First of all Thanks for the reply.... Let me paraphrase your reply,
Do the initial Load of all those ABAP roles in SAP system.
Connect the backend system using Jco connector.
Assign them in the workflow to do the provisioning. Is it right?
Also if new role created in the backend system how it will get updated in the server?
Is there any default job that will run periodically?
Any possibilities to implement it and integrate it with GRC?
Edited by: Kasivinodh Kumar Shanmuganathan on Jun 26, 2008 12:50 PM
Hi Kasi,
the configuration guide about the SAP Provisioning Framework covers all these tasks in detail. Also have a look at https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/f0ad23d3-3664-2a10-8aa7-e9c3c861....
In my last reply I wasn't sure if you wanted to know details about the connection between SAP IdM and the Web AS ABAP. That's why I mentioned how it's implemented in SAP NW IdM. For the connection you don't need to care about JCO and just need to fill in some parameters in SAP NW IdM (in the so-called repository). The steps you mentioned are right, except the connection, which is automatically established with the parameters from the repository for the initial load and the provisioning.
You can set up the jobs to run periodically (e.g. every night) - there's a flexible schedular in the SAP NW IdM. The SAP provisioning framework provides update jobs, which are similar to the initial loads.
For GRC, there's another framework, with the according configuration guide: https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/e08e21ba-dffa-2a10-5da7-c9c1d46d...
Best regards,
Nils
User | Count |
---|---|
88 | |
23 | |
11 | |
9 | |
8 | |
5 | |
5 | |
5 | |
5 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.