User De-provisioning

On the Manage menu, click Requests. The Requests page is displayed
Click the New icon. A drop-down list displays the list of requests that can be created for the Insights installed on your machine.
Click the SAP - User De-provisioning request. The page for creating a new request is displayed.

Introduction

De-provisioning may be required in cases where an employee leaves the company, or requires only temporary access to SAP. In such a case, the user account may need to be locked and the roles assigned to the user removed.

User de-provisioning requests are not analyzed. If the request type supports automatic completion, the user is locked by default, the user’s roles are revoked and the user is marked as expired.

If the request type does not support automatic completion, the Administrator has to lock the user manually and revoke the roles manually.

Note:The file SAMIWritebackConfig.xml located at [InstallPath]\Approva\BizRights\Settings enables you to configure whether to remove a user’s access and/or mark a user as expired in SAP. By default, these settings are enabled.

For details refer to the SAP - Configuration Settings Guide.

Create an SAP - User De-provisioning type of Request

Note: If you have selected User Groups as Additional Attributes, the validation of the selected user groups will be done against the last extracted data.

General Information

Use this panel to provide general information about the request such as the request name and other details, and the connection for which the request is created.

Provide a unique name to identify the request. This name is reflected on the Requests home page.

From the drop-down list, select a priority for the request.

Provide a connection for which the request is being created. You can set this connection as default from Preferences page.

To select a connection, type in a part of the connection name. All connections matching your search criteria are displayed. Select the desired connection.

Note: Multiple connections for this request may be selected.

The connections displayed in the drop-down list are a combination of both mapped and unmapped connections. You can select multiple mapped connections but the following combination of connections is not supported by IRC as the users will be different.

Mapped and Unmapped Connections
Multiple Unmapped connections

For details on mapped and unmapped connections refer to the topic Create or Modify a connection.

Alternatively, browse and select the desired connection and click OK. The selected connection appears in the Connections field.

Note: In case of secured connections, users signed into IRC will be able to view and use only those connections that they have access to.

Select the user to be de-provisioned.

To select a user, type in a part of the user name. All users matching the search criteria are displayed. If multiple connections are selected and the same user exists in those connections, the user will be displayed multiple times.

Select the desired user name. Alternatively, browse and select the desired user and click OK. The selected user appears in the Select User ID field .

Important: If users are manually mapped, the browse window will display the mapped name and not the ERP name. Write-back to the ERP will be on the basis of the mapped name.

This field displays the full name of the user selected. This field is a read only field and cannot be edited.

Provide the name of an SAP user who will be the approver for the current request if the user’s manager is unable to approve the request. For example, if the approval template has Manager of User as the approver at one or more stages but the manager is out of office then the Approval Manager approves the request.

Note: The Approval Manager field will be enabled only if the option Allow users to redirect request is selected on the Access Management section on the Configuration page.

To select an Approval Manager, type in a part of the user name. All users matching the search criteria are displayed. Select the desired user name. Alternatively, browse and select the desired user and click OK. The selected user appears in the Approval Manager field .

Select additional user attributes and provide values .

User attributes can be configured for all connections in which the user is present and should be enabled through the additionaluserattributes.xml file so that they are displayed on the request creation page.

For details refer to the SAP - Configuration Settings Guide

Note: Any additional user attributes added in the additionaluserattributes.xml cannot be connected and cannot write back to SAP.

More Details

Provide additional information about the request.

Comments are mandatory if the requestor comments option check box on the Access Management section on the Configuration page is selected.

This tab enables you to send email notifications to request participants or other users at specific stages of a request.

Select any of the request status check boxes next to a user. Email notifications will be sent to that user when the request reaches that status. The option Approval Email Notification ensures that a user is notified whenever a request is posted to that user’s Inbox.
Select the check box Display comments in email notifications, if you want the application to display comments in the notification.
Other users can be notified by selecting the option Others. Provide the email address for the other users in the Other emails text box and click the Add icon.

Note: Email settings are enabled and may be changed only if the check box Override this Option is selected in the Options panel of the Approval Process Templates page.

SAP - User De-provisioning

Introduction

Create an SAP - User De-provisioning type of Request

General Information

More Details

SAP - User De-provisioning Requests in CUA Clients