SAP - Role Assignment to Position

1. On the Manage menu, click Requests. The Requests page is displayed

2. Click the New icon. A drop-down list displays the list of requests that can be created for the Insights installed on your machine.

3. Click the SAP - Role Assignment to Position request. The page for creating a new request is displayed.

Provide a unique name to identify the request. This name is reflected on the Requests home page.

From the drop-down list, select a priority for the request.

Provide the connection for which the request is being created. If a connection is set from the Preferences page, it is selected by default in this drop-down list. The SAP Roles to Position request does not support multiple connections.

To select a connection, type in a part of the connection name in the autosuggest text box. All connection names matching the search criteria are displayed. Select the required connection.

Alternatively, browse and select the required connection and click OK.

Select the position for which role assignments are to be changed.

To select a position, type in a part of the position name and select the required position from the drop-down list.

Alternatively, browse and select the required position and click OK. All positions from the connection selected in the Connections field are available for selection.

Select the roles to be assigned to the  position as follows:

Type in a part of the role name. All roles from the selected connection and matching the search criteria are displayed. Alternatively,  browse and select the desired role and click OK. The selected roles appear in the Add New Roles field marked with an icon.

All roles from the selected connection are available for selection.

To remove a selected role, select the check box next to the role and click Remove.

Import Roles

If you wish to select multiple roles, you have the option of importing these roles through a CSV file. Only the following roles types can be imported and selected to be assigned:

• Simple Profile
• Composite Profile
• Simple Role
• Composite Role
• BizRights Role

Click here to view the format of this CSV file and the Role Type IDs of the above listed roles types.

Import the required roles as follows:

1. Click the Import icon.
2. In the Import Roles pop-up window that is displayed, click Browse and select the CSV file containing the required roles  an their Role Type IDs.
3. Click the Import icon. All the roles specified in the selected CSV file are displayed in a pop-up window. If any of these roles is not available in in the selected connection or is invalid, an icon is displayed next to it. Such roles are not imported through this file.
4. Select the check box Import All Roles to import all the valid roles or select the check box next to the roles to be imported.
5. Click the Import icon. All the valid roles from this CSV file are imported and are selected to be assigned.

The Valid From and Valid Through fields enable users to determine the validity period for newly assigned roles.

• Valid From: The Valid From text box enables users to provide a date from which the selected role assignment is valid. To set a valid from date for the selected role assignment, select Date of Approval and provide the required date or click the Calendar icon to select a specific date .

• Valid Through: The Valid Through text box enables users to provide a date till which the selected role assignment is valid. To set a valid through date for the selected role assignment, click Never Expires and provide the required date or click the Calendar icon to select a specific date or select Never Expires.

Users can revoke any of the roles already assigned to this position in the selected connection. To revoke a role, select the check box next to the role to be revoked and click Revoke. The role will be revoked after the request undergoes the approval process.

By default, all existing role assignments can be revoked through this request. This means that positions can have zero role assignments. You can modify this default setting in the AMSConfig.xml file to ensure that all existing roles are not revoked.

For details refer to the SAP - Configuration Settings Guide.

The Valid From field for already assigned roles is disabled, irrespective of whether the role is valid or expired. However, the Valid Through field for valid roles may be modified to reduce the validity period of the role.

Comments are mandatory if the requestor comments option check box on the Access Management section on the Configuration page is selected.

This tab enables you to send e-mail notifications to request participants or other users at specific stages of a request.  

When you select any of the request status check boxes next to a user, an email notification will be sent to that user when the request reaches that status.

1. Select the option Approval Email Notification to ensure that a user is notified by email.

2. Select the check box Display comments in email notifications, if you want the application to display comments in the notification.

3. Other users can be notified by selecting the option Others. Provide the email address for the other users in the Other emails text box and click the Add icon.

This panel provides details of the approval stages defined in the template created for this request type. It also displays the current status of the approval stages.