SAP ECC - How to add roles

[shivmano]

Hi Team,

We are integrating SAP ECC with Saviynt using the OOB SAP connector and would like to know how to perform the add access and remove access process. in the SAP connector we dont see the Add access or remove access json. All we see is CREATEACCOUNTJSON, UPDATEACCOUNTJSON, ENABLEACCOUNTJSON, FIREFIGHTERID_GRANT_ACCESS_JSON, FIREFIGHTERID_REVOKE_ACCESS_JSON. 

Has someone implemented this already? If yes, then can you please let us know how we can add SAP role, remove SAP role, create emergency access id, grant and revoke access to FIREFIGHTERID?

Thank you

[rushikeshvartak]

Add & Remove access JSON is maintained in product code and not customizable 

[shivmano]

@rushikeshvartak  - Can you please let me know how can we add and remove users on SAP roles using the OOB SAP connector? the below documentation does not seem to have information on how to do this 

https://docs.saviyntcloud.com/bundle/SAP-v24x/page/Content/Configuring-the-Integration-for-Provision... 

[rushikeshvartak]

You can request from  ars and add/Remove

[shivmano]

Which JSON in the SAP connector is invoked when Add access and remove access tasks are created? Like I said, I dont see that the SAP connector has any addaccessjson or removeaccessjson

[rushikeshvartak · Accepted solution]

As mentioned its internally code managed  called we dont need to configure anything. apart from having service account having write access.

[Manu269 · Accepted solution]

Saviynt internally invokes the BAPI Call based on tables listed : Preparing for Integration (saviyntcloud.com)

[shivmano]

Thank you @rushikeshvartak @Manu269 . Will test it

[RanjithSaiM]

Hello @shivmano , wanted to check if you were able to get through the issue you are facing with SAP ECC integration.

We are also working on importing SAP ECC entitlements and accounts and for some reason it does not import entitlements. Can you shed us some information/ configurations on the SAP ECC integration for data import?

[shivmano]

@RanjithSaiM  - Yes, make sure that you are specifying all the required tables in your 'Import Tables' . Additionally the user you are using on Saviynt should have the necessary access to BAPI functions provided on SAP 

https://docs.saviyntcloud.com/bundle/SAP-v24x/page/Content/Prerequisites-SAP-v2022x.htm 

Scenario List of Tables Used

Request access using the Access Request System	USR02, AGR_AGRS, AGR_TEXTS, AGR_DEFINE, AGR_USERS
Full import of account and roles	USR02, TSTC, TSTCT, AGR_AGRS, AGR_TEXTS, AGR_DEFINE, AGR_USERS, USORG, UST04, AGR_1252, AGR_1251
Full import of account and roles with lastname, firstname and department	USR02, USER_ADDR
Incremental import of account and role	USR04, USR02, AGR_USERS, AGR_TEXTS
Full import of account, role, and profile	USR02, TSTC, TSTCT, AGR_AGRS, AGR_TEXTS, AGR_DEFINE, AGR_USERS, USORG, UST04, UST10C, UST10S, UST12, AGR_1252, AGR_1251
Import Tcode usage	SWNCMONIINDEX