Is it possible to create a new privilege in backend ABAP system from IdM?

[Former Member]

Hi

Does anyone know if there is a standard solution for creating privileges directly in  IdM (7.1 or 7.2) and then provision the newly created privilege to a backend system - e.g. BI/BW system?

Or has anyone tried creating this on their own?

Kind regards

Heidi Kronvold

[Former Member · Accepted solution]

Hi Heidi

No, as far as I'm aware this is not possible.  IDM doesn't actually hold the assignment of rights in the back end systems so at best you'd be creating a shell with no rights attached.

Its probably possible to write your own setup to do it but I would be surprised if its actually worth the effort given the above restriction.

Peter

[Former Member · Accepted solution]

Hey Heidi,

No, it isn't possible. IdM can only manage assignment on the back ends.

Cheers,

Rob

[Former Member]

Normally you'd define update jobs that (automatically) read all the updated roles and profiles and create IDM privileges. You can then assign those privileges to roles and provision them (or provision them directly). You define update jobs on all connected systems and then transport the SAP roles thru (as usual). The update jobs then pick up the roles as you go....

In DM 7.1 the wizard was able to create those jobs. In 7.2 you have to copy the relevant passes from the initial load job and construct your own update job.