...
You can connect EmpowerID to SAP R/3 system two ways:
Application Server
Message Server
Each has its own set of prerequisites. Expand the drop-down for that connection method to view.
...
The SAP proxy account used for the S/4HANA connector needs to have access to the below tables as well as the ability to make the remote procedure calls listed:
REQUIRED TABLE ACCESS | REQUIRED REMOTE PROCEDURE CALLS | |
---|---|---|
ADCP | SAP Table | Required Columns (Keys) |
ADCP | CLIENT, ADDRNUMBER, PERSNUMBER, DATE_FROM, NATION | |
ADR2 | CLIENT, CLIENT, ADDRNUMBER, ADDRNUMBER, PERSNUMBER, PERSNUMBER, DATE_FROM, DATE_FROM, CONSNUMBER, CONSNUMBER, CONSNUMBER, TEL_NUMBER, TEL_NUMBER | |
ADR3 | CLIENT, ADDRNUMBER, PERSNUMBER, DATE_FROM, CONSNUMBER | |
ADR6 | CLIENT, ADDRNUMBER, ADDRNUMBER, PERSNUMBER, PERSNUMBER, DATE_FROM, CONSNUMBER, FLGDEFAULT, SMTP_ADDR | |
ADRP | CLIENT, PERSNUMBER, PERSNUMBER, DATE_FROM, NATION, NAME_FIRST, NAME_LAST | |
AGR_1016 | MANDT, AGR_NAME, AGR_NAME, COUNTER, PROFILE | |
AGR_1251 | MANDT, AGR_NAME, AGR_NAME, AGR_NAME, COUNTER, OBJECT, OBJECT, FIELD, FIELD, LOW, LOW, HIGH, HIGH | |
AGR_1252 | MANDT, AGR_NAME, COUNTER | |
AGR_AGRS | MANDT, AGR_NAME, AGR_NAME, CHILD_AGR, CHILD_AGR | |
AGR_DEFINE | MANDT, AGR_NAME | |
AGR_TEXTS | MANDT, AGR_NAME, AGR_NAME, AGR_NAME, SPRAS, LINE, LINE, LINE, TEXT | |
AGR_USERS | MANDT, AGR_NAME, UNAME, FROM_DAT, TO_DAT | |
AUSOBT | NAME, TYPE, OBJECT, FIELD, LOW | |
AUTHX | FIELDNAME | |
BUT000 | CLIENT, PARTNER, TYPE | |
BUT051 | CLIENT, RELNR, PARTNER1, PARTNER2, DATE_TO | |
BUT100 | MANDT, PARTNER, RLTYP, DFVAL | |
DD04T | ROLLNAME, DDLANGUAGE, AS4LOCAL, AS4VERS | |
GRACFFCTRL | MANDT, APP_TYPE, FFOBJECT, CONNECTOR, CNTRL_ID | |
GRACFFOWNER | MANDT, APP_TYPE, FFOBJECT, CONNECTOR, OWNER | |
GRACFFOWNERT | MANDT, LANGU, APP_TYPE, FFOBJECT, CONNECTOR, OWNER | |
GRACFFUSER | MANDT, APP_TYPE, FFOBJECT, CONNECTOR, FF_USER | |
HRP1000 | MANDT, MANDT, MANDT, PLVAR, OTYPE, OTYPE, OTYPE, OBJID, OBJID, ISTAT, BEGDA, ENDDA, LANGU, SEQNR, OTJID | |
HRP1001 | MANDT, MANDT, OTYPE, OBJID, OBJID, PLVAR, RSIGN, RELAT, ISTAT, PRIOX, BEGDA, ENDDA, VARYF, SEQNR, SCLAS, SOBID | |
HRP1032 | MANDT, PLVAR, OTYPE, SUBTY, OBJID, ISTAT, ENDDA, BEGDA, VARYF, SEQNR | |
PA0000 | MANDT, PERNR, SUBTY, OBJPS, SPRPS, ENDDA, BEGDA, SEQNR | |
PA0001 | MANDT, PERNR, SUBTY, OBJPS, SPRPS, ENDDA, BEGDA, SEQNR | |
PA0002 | MANDT, PERNR, SUBTY, OBJPS, SPRPS, ENDDA, BEGDA, SEQNR | |
PA0006 | MANDT, PERNR, SUBTY, OBJPS, SPRPS, ENDDA, BEGDA, SEQNR | |
PA0016 | MANDT, PERNR, SUBTY, OBJPS, SPRPS, ENDDA, BEGDA, SEQNR | |
PA0032 | MANDT, PERNR, SUBTY, OBJPS, SPRPS, ENDDA, BEGDA, SEQNR | |
PA0105 | MANDT, PERNR, SUBTY, OBJPS, SPRPS, ENDDA, BEGDA, SEQNR | |
PA2006 | MANDT, PERNR, SUBTY, OBJPS, SPRPS, ENDDA, BEGDA, SEQNR | |
RSBPCE_TEAM | APPSET_ID, TEAM_ID, OBJVERS | |
RSBPCE_USER_TEAM | APPSET_ID, TEAM_ID, TEAM_ID, OBJVERS, USER_ID, USER_ID | |
T591S | MANDT, SPRSL, INFTY, SUBTY | |
TACT | ACTVT | |
TACTZ | BROBJ, ACTVT | |
TADIR | PGMID, OBJECT, OBJ_NAME | |
TB003 | CLIENT, ROLE | |
TB003T | CLIENT, SPRAS, ROLE | |
TDEVC | DEVCLASS | |
TOBC | OCLSS | |
TOBJ | OBJCT | |
TOBJC | OBJCT, OCLSS | |
TOBJT | LANGU, OBJECT | |
TSAD3 | CLIENT, TITLE | |
TSAD3T | CLIENT, TITLE, LANGU | |
TSTC | TCODE | |
TSTCT | SPRSL, TCODE | |
USCOMPANY | MANDT, COMPANY | |
USGRP | MANDT, USERGROUP | |
USGRP_USER | MANDT, BNAME, USERGROUP, FROM_DAT, TO_DAT | |
USOBT | NAME, TYPE, OBJECT, FIELD, LOW | |
USOBT_C | NAME, TYPE, OBJECT, FIELD, LOW | |
USOBX | NAME, TYPE, OBJECT | |
USOBX_C | NAME, TYPE, OBJECT | |
USORG | FIELD | |
USR01 | MANDT, BNAME | |
USR02 | MANDT, BNAME, BNAME, GLTGV, GLTGB, USTYP, CLASS, UFLAG, TRDAT, LTIME | |
USR05 | MANDT, BNAME, PARID | |
USR06 | MANDT, BNAME | |
USR10 | MANDT, PROFN, PROFN, AKTPS, TYP | |
USR11 | MANDT, LANGU, PROFN, PROFN, AKTPS, PTEXT | |
USR21 | MANDT, BNAME | |
USRACL | MANDT, BNAME | |
USREFUS | MANDT, BNAME | |
UST04 | MANDT, BNAME, PROFILE | |
UST10C | MANDT, PROFN, PROFN, AKTPS, SUBPROF, SUBPROF | |
UST10S | MANDT, PROFN, PROFN, PROFN, AKTPS, OBJCT, OBJCT, OBJCT, AUTH, AUTH, AUTH | |
UST12 | MANDT, OBJCT, OBJCT, AUTH, AUTH, AKTPS, FIELD, FIELD, VON, VON, BIS, BIS |
Required Remote Procedure Calls | Required Activity |
---|---|
BAPI_USER_ACTGROUPS_ASSIGN |
Display |
BAPI_USER_CHANGE |
Execute |
BAPI_USER_CREATE1 |
ADR6
BAPI_USER_EXISTENCE_CHECK |
ADRP
BAPI_USER_GETLIST |
AGR_1016
BAPI_USER_GET_DETAIL |
BAPI_USER_LOCK |
AGR_AGRS
BAPI_USER_UNLOCK |
PING |
AGR_TEXTS
RFCPING |
AGR_USERS
RFC_GET_FUNCTION_INTERFACE |
RFC_GET_NAMETAB |
RFC_PING |
USCOMPANY
RFC_READ_TABLE |
PING |
RFCPING |
USR11
RFC_GET_FUNCTION_INTERFACE |
USR21
RFC_GET_NAMETAB |
USRACL
RFC_PING |
USREFUS
RFC_READ_TABLE |
UST04
UST10C
UST10S
UST12
Display
Execute
Tip |
---|
As each organization's implementation, practices, and procedures with SAP differs, EmpowerID uses an SAP Data Analysis Utility to ensure the necessary tables can be read and the necessary BAPI's can be invoked. The utility reads from all the same tables as the connector and copies data from those tables into the EmpowerID Identity Warehouse. This provides EmpowerID with the opportunity to review and analyze data in order to modify connector logic before setting up the connection. |
Insert excerpt | ||||||
---|---|---|---|---|---|---|
|
Macrosuite divider macro | ||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|