• State Suggested Answer
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 96 subscribers
  • Views 304 views
  • Users 0 members are here
Options
Related

Impossible to create an object SAPGrp ?

michel.gruau-ext
3 months ago

Hello,

We intend to create some SAP groups ("SAPGrp" table) but that looks to be impossible by default :
- In the SynchronizationEditor, if we create a workflow step that refers to the mapping "group" then, in processing tab, that is impossible to select any rule for the way from "One Identity Manager to the target system"
- In the ObjectBrowser, if we create a new SAPGrp, then all fiels are frozen and it's impossible to enter anything.

Is there a workaround or a way to enable SAPGrp creation ?

Many thanks for your help.

Michel

Parents
  • 0 3 months ago

    The documentation advises that this cannot be done:

    Groups, roles, and profiles are mapped in the One Identity Manager, in order to provide the necessary permissions for user accounts. Groups, roles, and profiles can be assigned to user accounts, requested, or inherited through hierarchical roles in One Identity Manager. No groups, roles, or profiles can be added or deleted.

  • 0 3 months ago in reply to Troy Grandy

    Hello Troy,

    When you say that "No groups, roles, or profiles can be added or deleted", do you mean this is a limitation coming from SAP CUA itself or from One Identity configuration ? In later case, is it nevertheless technically possible to enable creation of SAP groups and, if so, what is the risk behind ?

    Many thanks for your advice again.

    Michel

Reply
  • 0 3 months ago in reply to Troy Grandy

    Hello Troy,

    When you say that "No groups, roles, or profiles can be added or deleted", do you mean this is a limitation coming from SAP CUA itself or from One Identity configuration ? In later case, is it nevertheless technically possible to enable creation of SAP groups and, if so, what is the risk behind ?

    Many thanks for your advice again.

    Michel

Children
No Data