How does IDM takecare of Authorization issues

[Former Member]

Hi All,

I am pretty new to IDM product. I am aware that using IDM we can automate user creation and role assignment, also with 7.2 we have password self service available.

However i will like know whether IDM can also be used for regular authorization issues i.e., let say a user is facing an authorization issue in a particular tcode, in order to solve this issue we need to assign additional field values in one of his roles. will such issues where user id is already present and roles also assigned to that id but some changes to his roles is required be taken care by IDM.

I couldn't get this info from Master and solution operation guide of IDM 7.2, so thats why i am posting it here.

Regards,

Siva.

[ChrisPS · Accepted solution]

Hello - No IDM only manages the abap roles ie provisioning and deprovisioning. If the user requires additional authiorization and a role exists to solve this then this role can be assigned from IDM. However if you need to add extra values to a role this still needs to be done using PFCG.

Hope this answers the question.

Chris