Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.

SAP ECC - How to add roles

shivmano
Regular Contributor III
Regular Contributor III

Hi Team,

We are integrating SAP ECC with Saviynt using the OOB SAP connector and would like to know how to perform the add access and remove access process. in the SAP connector we dont see the Add access or remove access json. All we see is CREATEACCOUNTJSON, UPDATEACCOUNTJSON, ENABLEACCOUNTJSON, FIREFIGHTERID_GRANT_ACCESS_JSON, FIREFIGHTERID_REVOKE_ACCESS_JSON. 

Has someone implemented this already? If yes, then can you please let us know how we can add SAP role, remove SAP role, create emergency access id, grant and revoke access to FIREFIGHTERID?

 

Thank you

9 REPLIES 9

rushikeshvartak
All-Star
All-Star

Add & Remove access JSON is maintained in product code and not customizable 


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

shivmano
Regular Contributor III
Regular Contributor III

@rushikeshvartak  - Can you please let me know how can we add and remove users on SAP roles using the OOB SAP connector? the below documentation does not seem to have information on how to do this 

https://docs.saviyntcloud.com/bundle/SAP-v24x/page/Content/Configuring-the-Integration-for-Provision... 

You can request from  ars and add/Remove


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

shivmano
Regular Contributor III
Regular Contributor III

Which JSON in the SAP connector is invoked when Add access and remove access tasks are created? Like I said, I dont see that the SAP connector has any addaccessjson or removeaccessjson

 

As mentioned its internally code managed  called we dont need to configure anything. apart from having service account having write access.


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

Saviynt internally invokes the BAPI Call based on tables listed : Preparing for Integration (saviyntcloud.com)

Regards
Manish Kumar
If the response answered your query, please Accept As Solution and Kudos
.

shivmano
Regular Contributor III
Regular Contributor III

Thank you @rushikeshvartak @Manu269 . Will test it

RanjithSaiM
New Contributor
New Contributor

Hello @shivmano , wanted to check if you were able to get through the issue you are facing with SAP ECC integration.

We are also working on importing SAP ECC entitlements and accounts and for some reason it does not import entitlements. Can you shed us some information/ configurations on the SAP ECC integration for data import?

shivmano
Regular Contributor III
Regular Contributor III

@RanjithSaiM  - Yes, make sure that you are specifying all the required tables in your 'Import Tables' . Additionally the user you are using on Saviynt should have the necessary access to BAPI functions provided on SAP 

https://docs.saviyntcloud.com/bundle/SAP-v24x/page/Content/Prerequisites-SAP-v2022x.htm 

 

Scenario List of Tables Used

Request access using the Access Request System

USR02, AGR_AGRS, AGR_TEXTS, AGR_DEFINE, AGR_USERS

Full import of account and roles

USR02, TSTC, TSTCT, AGR_AGRS, AGR_TEXTS, AGR_DEFINE, AGR_USERS, USORG, UST04, AGR_1252, AGR_1251

Full import of account and roles with lastname, firstname and department

USR02, USER_ADDR

Incremental import of account and role

USR04, USR02, AGR_USERS, AGR_TEXTS

Full import of account, role, and profile

USR02, TSTC, TSTCT, AGR_AGRS, AGR_TEXTS, AGR_DEFINE, AGR_USERS, USORG, UST04, UST10C, UST10S, UST12, AGR_1252, AGR_1251

Import Tcode usage

SWNCMONIINDEX