SAP EP - User Re-Provisioning

1. On the Manage menu, click Requests. The Requests page is displayed

2. Click New. A drop-down list displays a list of requests that can be created for the installed Insights.

3. Click SAP EP - User Re-Provisioning. The page for creating a new request is displayed.

Provide a unique name to identify the request. This name is reflected on the Requests home page.

From the drop-down list, select the priority of the request being created.

Select the connection for which the request is being created. You can set this connection as default from Preferences page.

To select a connection, type in part of connection name in the autosuggest text box. All connections matching the search criteria will be displayed. Select the required connection. The connection appears in the Connections field.

Alternatively, browse and select the desired connection and click OK. The connection appears in the Connections field.

Select the user whose account is to be re-provisioned.

To select a user, type in part of user name in the autosuggest text box. All users from the selected connection and matching the search criteria will be displayed. Select the required user. Ensure that you select a locked user.

Alternatively,  browse and select the desired user and click OK. The user appears in the Select User field.

If the connection selected is a mapped connection then the list of roles and user groups assigned to the user from the other connections are also displayed.

The Valid From text box enables you to provide a date from which the selected user is valid.

• If a valid from date is already selected for the user, that date will appear in the text box. Click the Calendar icon to modify the date or select Date of Approval if the validity period is to begin from the date of approval of the request.

• If a valid from date is not set for the selected user, click the Add icon to either select a specific date or select Date of Approval.

The Valid Through text box enables you to provide a date till the selected user is valid.

• If a valid through date is already selected for the user, that date will appear in the text box. Click the Calendar icon to modify the date or select Never Expires.

• If a valid through date is not set for the selected user, you can click the Calendar icon to either select a specific date or select Never Expires.

Provide a description for the selected user.

Provide the name of the IRC user who will be the approver for the current request if the user’s manager is unable to approve the request. For example, if the approval template has Manager of User as the approver at one or more stages but the manager is out of office, then the Approval Manager will approve the request.

To select an approval manager, type in part of the user name in the autosuggest text box. All users matching the search criteria will be displayed. Select the required user.

Alternatively,  browse and select the desired user and click OK.

Provide the name of the user whose roles are to be assigned to the selected user.

To select a user, type in part of the user name in the autosuggest text box. All users matching the search criteria will be displayed. Select the required user.

Alternatively,  browse and select the desired user and click OK. The user appears in the Assign Roles \ User Groups as this User field.

User attributes can be configured for the connection in which the user is present and should be enabled through the AdditionalUserAttributes_SAPEP.xml file so that they are displayed on the request creation page.

Currently Access Manager for SAP Enterprise Portal supports only email address as an additional user attribute.

For details refer to the SAP - Configuration Settings Guide.

This panel enables you to assign new roles to the selected user. If you selected an existing user in the Assign Roles \ User Groups as this User field, the roles belonging to that user will be listed here and you have the option of removing roles that are not required.

To select a role, type in part of the role name in the autosuggest text box. All roles from the selected connection and matching the search criteria will be displayed. Select the required role.

Alternatively,  browse and select the desired role and click OK. The selected role name appears in the New Roles to be Assigned to the User field identified with an icon .

To remove a role assigned to the user,

Select the check box next to the role to be removed and click Remove.

This panel enables you to assign new user groups to the selected user. If you selected an existing user in the Assign Roles \ User Groups as this User field, the user groups belonging to that user will be listed here and you have the option of removing user groups that are not required.

To select a user group, type in part of the user group name in the autosuggest text box. All user groups matching the search criteria will be displayed. Select the required user group.

Alternatively,  browse and select the desired user group and click OK. The selected user group name appears in the Add New User Groups field identified with an icon .

To remove a user group assigned to the user,

Select the check box next to the user group to be removed and click Remove.

To revoke an existing role, select the check box next to the role to be revoked and click Revoke.

When existing roles are revoked in a request, the roles are removed from SAP Enterprise Portal.

By default, all existing role assignments can be revoked through this request. This means that users can have zero role assignments. You can modify this default setting in the AMSConfig.xml file to ensure that all existing roles are not revoked.

For details refer to the SAP - Configuration Settings Guide.

To revoke an existing user group, select the check box next to a user group to be revoked and click Revoke.

When existing user groups are revoked in a request, the user groups are removed from SAP Enterprise Portal.

Comments are mandatory if the Requestor Comments option check box is selected in the approval template global settings. These settings are available on the Access Management tab on the Configuration page.

This tab enables you to send email notifications to request participants or other users at specific stages of a request.  

1. Select any of the request status check boxes next to a user. Email notifications will be sent to that user when the request reaches that status. The option Approval Email Notification ensures that a user is notified whenever a request is posted to that user’s Inbox.

2. Select the check box Display comments in email notifications, if you want the application to display comments in the notification.

3. Other users can be notified by selecting the option Others. Provide the email address for the other users in the Other emails text box and click the Add icon.

This panel provides details of the approval stages of the request and its present status.