User Access Review (UAR) Reference Guide SAP Access …

1 User Access Review (UAR). Reference Guide SAP Access Control Target Audience Technology Consultants System Administrators Solution Consultants Business Process Owner Support Specialist Document version: March 2018. SAP AG. Dietmar-Hopp-Allee 16. 69190 Walldorf Germany T +49/18 05/34 34 24. F +49/18 05/34 34 20. Copyright 2018 SAP AG. All rights reserved. Java is a registered trademark of Sun Microsystems, Inc No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of SAP AG.

2 JavaScript is a registered trademark of Sun Microsystems, Inc., used The information contained herein may be changed without prior under license for technology invented and implemented by Netscape. notice. SAP, R/3, xApps, xApp, SAP NetWeaver, Duet, PartnerEdge, Some software products marketed by SAP AG and its distributors ByDesign, SAP Business ByDesign, and other SAP products and contain proprietary software components of other software vendors. services mentioned herein as well as their respective logos are trademarks or registered trademarks of SAP AG in Germany and in Microsoft, Windows, Excel, Outlook, and PowerPoint are registered several other countries all over the world.

3 All other product and trademarks of Microsoft Corporation. service names mentioned are the trademarks of their respective companies. Data contained in this document serves informational IBM, DB2, DB2 Universal Database, System i, System i5, System p, purposes only. National product specifications may vary. System p5, System x, System z, System z10, System z9, z10, z9, iSeries, pSeries, xSeries, zSeries, eServer, z/VM, z/OS, i5/OS, S/390, These materials are subject to change without notice. SAP AG and its OS/390, OS/400, AS/400, S/390 Parallel Enterprise Server, PowerVM, affiliated companies ( SAP Group ) provide these materials for Power Architecture, POWER6+, POWER6, POWER5+, POWER5, informational purposes only, without representation or warranty of any POWER, OpenPower, PowerPC, BatchPipes, BladeCenter, System kind, and SAP Group shall not be liable for errors or omissions with Storage, GPFS, HACMP, RETAIN, DB2 Connect, RACF, Redbooks, respect to the materials.

4 The only warranties for SAP Group products OS/2, Parallel Sysplex, MVS/ESA, AIX, Intelligent Miner, and services are those that are set forth in the express warranty WebSphere, Netfinity, Tivoli and Informix are trademarks or statements accompanying such products and services, if any. Nothing registered trademarks of IBM Corporation. herein should be construed as constituting an additional warranty. Linux is the registered trademark of Linus Torvalds in the and other countries. Disclaimer Adobe, the Adobe logo, Acrobat, PostScript, and Reader are either Some components of this product are based on Java.

5 Any code trademarks or registered trademarks of Adobe Systems Incorporated in change in these components may cause unpredictable and severe the United States and/or other countries. malfunctions and is therefore expressively prohibited, as is any decompilation of these components. Oracle is a registered trademark of Oracle Corporation. Any Java Source Code delivered with this product is only to be used UNIX, X/Open, OSF/1, and Motif are registered trademarks of the by SAP's Support Services and may not be modified or altered in any Open Group.

6 Way. Citrix, ICA, Program Neighborhood, MetaFrame, WinFrame, VideoFrame, and MultiWin are trademarks or registered trademarks of Citrix Systems, Inc. Documentation in the SAP Service Marketplace You can find this documentation at the following address: HTML, XML, XHTML and W3C are trademarks or registered trademarks of W3C , World Wide Web Consortium, Massachusetts Institute of Technology. Typographic Conventions Icons Type Style Represents Icon Meaning Example Text Words or characters that Caution appear on the screen.

7 These include field names, screen Example titles, pushbuttons as well as menu names, paths and options. Note Cross-references to other Recommendation documentation Example text Emphasized words or phrases Syntax in body text, titles of graphics and tables EXAMPLE TEXT Names of elements in the system. These include report names, program names, transaction codes, table names, and individual key words of a programming language, when surrounded by body text, for example, SELECT and INCLUDE. Example text Screen output.

8 This includes file and directory names and their paths, messages, names of variables and parameters, source code as well as names of installation, upgrade and database tools. Example text Exact user entry. These are words or characters that you enter in the system exactly as they appear in the documentation. <Example text> Variable user entry. Pointed brackets indicate that you replace these words and characters with appropriate entries. EXAMPLE TEXT Keys on the keyboard, for example, function keys (such as F2) or the ENTER key.

9 UAR Reference Guide : SAP Access Control Contents Contents 1. Getting Started ..5. Document History ..5. About this Audience for this Guide ..6. 2. Introducing User Access Review ..7. 3. Participants in the UAR Process ..7. 4. Exploring the UAR 5. Roles in the UAR ..9. Choosing Role Types in the UAR Process ..11. 6. Exploring Process Options ..14. Admin Security Stage ..14. Additional Approver Stage ..14. 7. Understanding Workflow Stage Configuration ..14. Configuring Email Notification ..15. Setting Reminders.

10 15. Specifying Escalation ..15. 8. Performing Automatic Provisioning ..16. 9. Prerequisites ..16. Importing Roles ..16. 10. Managing IMG Configurations for UAR ..17. Maintaining Configuration Defining an Email Reminder ..19. Specifying the Service Level Agreement ..20. 11. Managing Coordinators ..21. 12. Managing the UAR Workflow ..23. Managing Workflow Settings for UAR ..23. 13. Generating Data for UAR ..31. 14. Performing an Admin Review ..34. Updating the Workflow for UAR Requests ..37. 15. Reviewing UAR Requests.