Creating a user to ABAP client

[Former Member]

Hello all.

I am beginner in the SAP IDM world. May I ask something for you?

I´ve configured all product and now I am trying provision users to ABAP client.I´ve created a job with To Identity Store pass that reads a SQL database. The job is executed this sucess the user is created in the client. The bussiness role with the technical role were assigned (Identity Store)to user correctly but the technical role uploaded by job Initial Load is not assigned to ABAP client.

See the attachments, please.

IDM Role (ANALISTA DE SUPORTE PLENO)

Privilege (ZSAP_SM_USER_ADMIN)

IS pass

User created

User provisioned

The ABAP role  ZSAP_SM_USER_ADMIN is not provisioned

Could you help me, please?

Thank you very much.

[Steffi_Warnecke · Accepted solution]

Hello Rafael,

can you please check (and share) a screenshot of the tabs of the privilege to see, if there the repository and the master privilege are assigned?

Regards,

Steffi.

[Former Member · Accepted solution]

Steffi,

Please, look the screenshot below

Thanks.

[Steffi_Warnecke · Accepted solution]

Hello Rafael,

I meant from the MMC/Eclipse side (the technical information), not in the UI.

Regards,

Steffi.

[Former Member · Accepted solution]

Steffi, I´m sorry, I´m using SAP IDM 8.0. Where can I get this information in SAP Identity Management Developer Studio?

Thanks for your attention!!!

[Steffi_Warnecke · Accepted solution]

I'm sorry, we're not on 8.0 yet, so I can't tell you. 😕

[Former Member · Accepted solution]

If help you see the query to view idmv_vallink_basic

[jaisuryan · Accepted solution]

Hi Rafael,

I can see you have configured ADD/DEL MEMBER task on your privilege instead of inheriting from repository.

Can you please check if the task with taskid 966 is executed? If so, if any errors in it?

And check if you got corresponding hook task triggered. i.e MX_HOOK4_TASK. Not sure if its the same in IDM 8.0

Kind regards,

Jai

[Former Member · Accepted solution]

Jai, firstly thanks for your attention.

There are no errors during task execution.

I have noticed that even I creating the user manually by the web UI or through a provisioning job the ABAP roles uploaded by initial load job are not assigned. Manually should be created, isn´t?

Below you can see the task log id 973 with the pass Set ABAPRole&ProfileforUser

This time I´ve assigned a standard ABAP Role IPRO/CONTRACT_AUTHOR

[Former Member · Accepted solution]

Jai.

I´v tried assigned manually (IDM WEB UI) a ABAP profile to user and I got it.

But a ABAP role like IPRO/CONTRACT_AUTHOR is not assigned.

See the log:

At this moment I could only assigned ABAP profile. Why?

Thank you very much

[jaisuryan · Accepted solution]

Hi Rafael,

Check if this note is applicable for you.

https://websmp230.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/sno/ui_entry/entry.htm?param=69765F6D6F6465...

Kind regards,

Jai

[Former Member · Accepted solution]

Jai, perfect. We were working patch 3. I´ve applied patch 4 and now is working correctly.

Thank you very much for your attention

[former_member2987]

Hi Rafael,

Are you specifying the repository somewhere?

Thanks,

Matt

[Former Member]

On the General tab at To identity store pass

[former_member2987]

Ok so that looks good.  Try hard coding the privileges you are adding.  You should only need to specify the ONLY privilege as well.

Matt