SAP EP - Role and User Group Assignment Management Request

On the Manage menu, click Requests. The Requests page is displayed.
Click New. A drop-down list displays a list of requests that can be created for the installed Insights.
Click SAP EP - Role and User Group Assignment Management. The page for creating a new request is displayed.

Introduction

Create an SAP EP - Role and User Group Assignment Management Request

General Information

Use this panel to provide general information about the request such as the request name and other details, and the connection for which the request is created.

Provide a unique name to identify the request. This name is reflected on the Requests home page.

From the drop-down list, select the priority of the request being created.

Select the connection for which the request is being created. You can set this connection as default from Preferences page.

Note: In case of secured connections, users signed into IRC will be able to view and use only those connections that they have access to.

To select a connection, type in part of connection name in the autosuggest text box. All connections matching the search criteria will be displayed. Select the required connection.

Alternatively, browse and select the desired connection and click OK. The connection appears in the Connections field.

Note: This request type does not support multiple connections.

Select the user whose roles and user groups are to be modified or select the user to whom you want to assign new roles and user groups.

To select a user, type in part of user name in the autosuggest text box. All users from the selected connection and matching the search criteria will be displayed. Select the required user.

Alternatively, browse and select the desired user and click OK. The user appears in the Select User ID field.

Note: If a request for the same user is already pending, IRC displays a message alerting you about the duplicate assignment. You have the option to continue the request, cancel it or select a different user.

If the request is continued, then, during the approval process, the approver will see the message in the Previous Comments section.

If the connection selected is a mapped connection then the list of roles and user groups assigned to the user from the other connections are also displayed.

The Valid From text box enables you to provide a date from which the selected user is valid.

If a valid from date is already selected for the user, that date will appear in the text box. Click the Calendar icon to modify the date or select Date of Approval if the validity period is to begin from the date of approval of the request.
If a valid from date is not set for the selected user, click the Calendar icon to either select a specific date or select Date of Approval.

Note: Date of Approval will be replaced with the actual approval date when the request is completed and write-back is successful.

The Valid Through text box enables you to provide a date till the selected user is valid.

If a valid through date is already selected for the user, that date will appear in the text box. Click the Calendar icon to modify the date or select Never Expires.
If a valid through date is not set for the selected user, you can click the Calendar icon to either select a specific date or select Never Expires.

Note: The Valid Through date can either be the current date or a future date.

Provide a description for the selected user.

Provide the name of the IRC user who will be the approver for the current request if the user’s manager is unable to approve the request. For example, if the approval template has Manager of User as the approver at one or more stages but the manager is out of office, then the Approval Manager will approve the request.

Note: The Approval Manager field will be enabled only if the option Allow Users to Redirect Request is selected on the Access Management tab on the Configuration page.

To select an approval manager, type in part of the user name in the autosuggest text box. All users matching the search criteria will be displayed. Select the required user.

Alternatively, browse and select the desired user and click OK.

Provide the name of the user whose roles and user groups are to be assigned to the selected user.

To select a user, type in part of the user name in the autosuggest text box. All users matching the search criteria will be displayed. Select the required user.

Alternatively, browse and select the desired user and click OK. The user appears in the Assign Roles/ User Groups as this User field.

User attributes can be configured for the connection in which the user is present and should be enabled through the AdditionalUserAttributes_SAPEP.xml file so that they are displayed on the request creation page.

Currently Access Manager for SAP Enterprise Portal supports only email address as an additional user attribute.

For details refer to the SAP - Configuration Settings Guide

New Roles to be Assigned to the User

This panel enables you to add new roles to the user and remove unwanted roles assigned to the user.

This panel enables you to assign new roles to the selected user. If you selected an existing user in the Assign Roles/ User Groups as this User field, the roles belonging to that user will be listed here and you have the option of removing roles that are not required.

To select a role, type in part of the role name in the autosuggest text box. All roles from the selected connection and matching the search criteria will be displayed. Select the required role.

Alternatively, browse and select the desired role and click OK. The selected role name appears in the New Roles to be Assigned to the User field identified with an icon .

Note: Only roles that are assigned role assigner permissions are able to perform role assignments. You can assign role assigner permissions and evaluate the implications by toggling and modifying the Role Assigner Permission for the selected roles. This permission applies to role objects only and is assigned on PCD roles (users, roles, or user groups) .

To remove a role assigned to the user:

Select the check box next to the role to be removed and click Remove.

New User Groups to be Assigned to the User

This panel enables you to add new user groups to the user and remove unwanted user groups assigned to the user.

This panel enables you to assign new user groups to the selected user. If you selected an existing user in the Assign Roles/User Groups as this User field, the user groups belonging to that user will be listed here and you have the option of removing user groups that are not required.

.To select a user group, type in part of the user group name in the autosuggest text box. All user groups from the selected connection and matching the search criteria will be displayed. Select the required user group.

Alternatively, browse and select the desired user group and click OK. The selected user group name appears in the Add New User Groups field identified with an icon .

To remove a user group assigned to the user,

Select the check box next to the user group to be removed and click Remove.

Roles already Assigned to the User

This panel displays the roles already assigned to the selected user. If a mapped connection is selected for this request, this panel will also list the roles that are assigned to this user from the other connections

To revoke an existing role, select the check box next to the role to be revoked and click Revoke.

By default, all existing role assignments can be revoked through this request. This means that users can have zero role assignments. You can modify this default setting in the AMSConfig.xml file to ensure that all existing roles are not revoked.

For details refer to the SAP - Configuration Settings Guide

User Groups already Assigned to the User

This panel displays the user groups already assigned to the selected user. If a mapped connection is selected for this request, this panel will also list the use groups that are assigned to this user from the other connections

To revoke an existing user group, select the check box next to a user group to be revoked and click Revoke.

More Details

Comments are mandatory if the Requestor Comments option check box is selected in the approval template global settings. These settings are available on the Access Management tab on the Configuration page.

This tab enables you to send email notifications to request participants or other users at specific stages of a request.

Select any of the request status check boxes next to a user. Email notifications will be sent to that user when the request reaches that status. The option Approval Email Notification ensures that a user is notified whenever a request is posted to that user’s Inbox.
Select the check box Display comments in email notifications, if you want the application to display comments in the notification.
Other users can be notified by selecting the option Others. Provide the email address for the other users in the Other emails text box and click the Add icon.

Note: Email settings are enabled and may be changed only if the check box Override this Option is selected in the Options panel of the Approval Process Templates page.