Proper setup of the IDM Account in SAP Backend

[former_member2987]

Hi there!

On my current project, I am being asked about the proper setup of the SAP Account that IDM will use to provision users in an ABAP system.

What T-codes, objects, and values do you use?  Do you assign any specifc roles?

Thanks for your help!

Regards,

Matt

[terovirta · Accepted solution]

Hi Matt,

the needed role is shipped with design time installation set:

Upload the role to ABAP, create technical user and assign the role to the user and you're good to go.

If they're SAP-authorization people who ask the questions they'll know what's in the file.

regards, Tero

[former_member2987 · Accepted solution]

Thanks, Tero!

I'm assuming it's the SAP GUI shortcut that has the information?  I'm assuming also that this gets things all lined up to do the HCM writeback for emails as well.

Thanks,

Matt

[Colleen · Accepted solution]

Hi Matt

The SAP GUI shortcut is misleading. Security team can upload that file into transaction PFGC.

When you download a SAP role from PFCG you give it a .SAP extension. It then appears as a shortcut. If you open the file in notepad you'll see a heap of AGR_* table entries

Regards

Colleen

[terovirta · Accepted solution]

Matt Pollicove wrote:

 I'm assuming it's the SAP GUI shortcut that has the information? 

It's only a text-file, you can see the contents with Notepad. The .SAP-extension has been registered as shortcut in Windows with SAP GUI installation.

regards, Tero