The purpose of this post is to demonstrate how to create Template Based Requests and make them available for provisioning in SAP. This document will demonstrate how to customize and associate End User Personalization forms for use with Access Request: Template Based Requests.

    Template Based Requests are an effective way to provision access in SAP environments. Security administrators can create pre-defined templates with specified roles for each back-end environment to simply provision requests for end users. In addition, templates can leverage the Business Role Concept from Business Role Management in GRC 10.0/10.1 to provision bundled composites and singles roles across multiple back-end environments. The following steps outline the process to follow when implementing template based requests:

Step 1: Customize EUP personalization

Access the GRC IMG via t_code SPRO followed by menu path:


Governance, Risk and Compliance> Access Control> User Provisioning> Maintain End User Personalization


/wp-content/uploads/2014/02/1_379802.jpg


/wp-content/uploads/2014/02/2_379803.jpg


Step 2: Create copy of the default EUP personalization form

Within the IMG activity, select the default EUP personalization form.

/wp-content/uploads/2014/02/3_379804.jpg

With the default EUP personalization form selected press F6 or click the “copy as” icon.

/wp-content/uploads/2014/02/4_379805.jpg

Enter a new EUP ID #, EUP Config Name, and Description.

/wp-content/uploads/2014/02/5_379806.jpg

Execute or hit enter and copy all dependent entries in the following pop-up.

/wp-content/uploads/2014/02/6_379807.jpg

/wp-content/uploads/2014/02/7_379808.jpg

Click through the confirmation pop-up and save.

/wp-content/uploads/2014/02/8_379809.jpg

Step 3: Customize the EUP Copy

Select the new EUP personalization form and double click the maintain EUP fields folder.

/wp-content/uploads/2014/02/9_379810.jpg

/wp-content/uploads/2014/02/10_379798.jpg

Select fields to include or exclude in the Template Based Request and save.

/wp-content/uploads/2014/02/8_379809.jpg

/wp-content/uploads/2014/02/11_379815.jpg

List of available options for each field.

      /wp-content/uploads/2014/02/12_379816.jpg/wp-content/uploads/2014/02/13_379820.jpg/wp-content/uploads/2014/02/14_379821.jpg/wp-content/uploads/2014/02/15_379822.jpg

Step 4: Create an Access Request: Template Based Request and how to associate EUP Personalization forms.

Navigate to the Access Management Work center in NWBC and select the Template Management under Access Request Administration.

/wp-content/uploads/2014/02/16_379823.jpg

Select create, input name of Template, EUP form, and Request Type.

/wp-content/uploads/2014/02/17_379824.jpg

/wp-content/uploads/2014/02/18_379825.jpg

/wp-content/uploads/2014/02/19_379826.jpg

Select Access Details, and click the add button, choose role.

/wp-content/uploads/2014/02/20_379827.jpg

Choose single, composite, or business role, move role down and select OK.

/wp-content/uploads/2014/02/21_379828.jpg

/wp-content/uploads/2014/02/22_379830.jpg

Role will now appear in the Template, select save.

/wp-content/uploads/2014/02/23_379831.jpg

/wp-content/uploads/2014/02/24_379832.jpg

Access Request: Template Based Request is now available for provisioning.

/wp-content/uploads/2014/02/25_379833.jpg

Access Request: Template Based Request end user view.

/wp-content/uploads/2014/02/26_379834.jpg

Template Based Access Requests can take some time to configure, but the benefits gained simplifying access requests for end users often makes this an easy enhancement to justify for your GRC environment.

To report this post you need to login first.

2 Comments

You must be Logged on to comment or reply to a post.

Leave a Reply