SAP EP - User De-Provisioning Request

On the Manage menu, click Requests. The Requests page is displayed.
Click New. A drop-down list displays a list of requests that can be created for the installed Insights.
Click SAP EP - User De-Provisioning. The page for creating a new request is displayed.

Introduction

If a user leaves the company or no longer requires access to SAP Enterprise Portal, the user account may need to be locked and the roles and user groups assigned to the user account may need to be revoked.

Note: When you revoke user groups, the user groups, Everyone and Authenticated Users are retained. These two user groups are internally assigned to the new user in SAP Enterprise Portal and thus will not show on the request page.

A user cannot be de-provisioned on the same day as which the user account was created. SAP Enterprise Portal does not support the same start date and end date for a user and such a request will fail when the ERP application is updated.

If the request type supports automatic completion, the user is locked by default, the user’s roles and user groups are revoked and the user is marked as locked.

Note: The file WritebackConfig.xml located at [InstallPath]\Approva\BizRights\Settings enables you to remove a user’s access or mark a user as expired in SAP Enterprise Portal. By default, these settings are enabled.

For details, refer to the SAP EP- Configuration Settings Guide.

If the request type does not support automatic completion, the SAP EP application administrator has to lock the user manually and revoke the roles and the user groups manually.

Create a SAP EP - User De-Provisioning

General Information

Use this panel to provide general information about the request such as the request name and other details, and the connection for which the request is created.

Provide a unique name to identify the request. This name is reflected on the Requests home page.

From the drop-down list, select the priority of the request being created.

Select the connection for which the request is being created. You can set this connection as default from Preferences page.

Note: In case of secured connections, users signed into IRC will be able to view and use only those connections that they have access to.

To select a connection:

Type in part of connection name in the autosuggest text box. All connections matching the search criteria will be displayed. Select the required connection.

Alternatively, browse and select the desired connection and click OK. The connection appears in the Connections field.

Note: This request type does not support multiple connections.

Select the user whose account is to be de-provisioned.

To select a user, type in part of user name in the autosuggest text box. All users from the selected connection and matching the search criteria will be displayed. Select the required user.

Alternatively, browse and select the desired user and click OK. The user appears in the Select User field.

Note: Ensure that the user selected is not already locked. If you select a locked user, the request will fail. While selecting a user from the Browse Users window, check the locked status. The locked status 'false' indicates that the user is not locked. The locked status 'true' indicates that the user is locked.

Note: If a request for the same user is already pending, IRC displays a message alerting you about the duplicate assignment. You have the option to continue the request, cancel it or select a different user.

If the request is continued, then, during the approval process, the approver will see the message in the Previous Comments section.

The Valid From text box enables you to provide a date from which the selected user is valid.

If a valid from date is already selected for the user, that date will appear in the text box. Click the Calendar icon to modify the date or select Date of Approval if the validity period is to begin from the date of approval of the request.
If a valid from date is not set for the selected user, click the Calendar icon to either select a specific date or select Date of Approval.

Note: Date of Approval will be replaced with the actual approval date when the request is completed and write-back is successful.

The Valid Through text box enables you to provide a date till the selected user is valid.

If a valid through date is already selected for the user, that date will appear in the text box. Click the Calendar icon to modify the date or select Never Expires.
If a valid through date is not set for the selected user, you can click the Calendar icon to either select a specific date or select Never Expires.

Note: The Valid Through date can either be the current date or a future date.

Provide a description for the selected user.

Provide the name of the IRC user who will be the approver for the current request if the user’s manager is unable to approve the request. For example, if the approval template has Manager of User as the approver at one or more stages but the manager is out of office, then the Approval Manager will approve the request.

Note: The Approval Manager field will be enabled only if the option Allow Users to Redirect Request is selected on the Access Management tab on the Configuration page.

To select an approval manager, type in part of the user name in the autosuggest text box. All users matching the search criteria will be displayed. Select the required user.

Alternatively, browse and select the desired user and click OK.

More Details

Comments are mandatory if the Requestor Comments option check box is selected in the approval template global settings. These settings are available on the Access Management tab on the Configuration page.

This tab enables you to send email notifications to request participants or other users at specific stages of a request.

Select any of the request status check boxes next to a user. Email notifications will be sent to that user when the request reaches that status. The option Approval Email Notification ensures that a user is notified whenever a request is posted to that user’s Inbox.
Select the check box Display comments in email notifications, if you want the application to display comments in the notification.
Other users can be notified by selecting the option Others. Provide the email address for the other users in the Other emails text box and click the Add icon.

Note: Email settings are enabled and may be changed only if the check box Override this Option is selected in the Options panel of the Approval Process Templates page.