SAP User Master Data Comparison needed after provisioning Composite Role

[ASA]

When we provision membership to an SAP composite role, we can see in SAP, that only that membership has an active status. The content of that composite role is listed too, but as inactive. A master data comparison is needed for the access to become effective.

Is there a way to avoid this and have all of it active after provisioning? Could find anything about it in documentation.

[rushikeshvartak]

This configuration at SAP level. Saviynt only provision Composite role.

[ASA]

Hi Rushikesh,

Thanks for the response. I discussed with SAP admins and they don't know of such a setting (other then scheduling user master data comparison frequently).

Can you give me a hint what we have to set up?

[rushikeshvartak]

Red : Not maintained
Yellow : Partially maintained
Green : Fully maintained

https://answers.sap.com/questions/8019714/red-green-yellow---whats-the-logic-in-it.html 

[ASA]

Sorry, but I don't get what "Not maintained" means in this context. The composite roles should be completely maintained. I should have mentioned in my initial post, that, when the composite role is assigned in SAP, everything is green right away. Only when provisioning via Saviynt, it stays red. Never had this issue with other IAM tools, so I'm kind of stumped 🙂

[rushikeshvartak]

This is moreover SAP admin configuration, Every role having tcode authorization hence they need to configure correctly 🙂