- SAP Managed Tags
SAP Central Business Configuration is a new tool that will make it possible to configure business process spanning multiple SAP cloud solutions from one central place. SAP Central Business Configuration will first allow the configuration of SAP S/4 HANA Cloud but aims at the seamless implementation of end-to-end business processes across SAP’s intelligent enterprise.
In this blog post, we will see how to manage business users in Central Business Configuration.
Initial Handover Emails
After contract is signed with SAP, the IT administrator at the customer will receive below handover emails as shown below.
handover emails
- The first email is for accessing SAP Central Business Configuration System. This email will contain links for Central Business Configuration, Identity Authentication, and Identity Provisioning, Business Technology Platform, Cloud ALM and Starter Customizing system.
- The second handover email is for Identity Authentication. This email comes with the access information to the SAP Cloud Platform Identity Authentication. Again, the IT person specified in the contract will be the owner of this system. The IT Administrator should reset his/her.password and access this tenant as the first step. Contact IT person can access the SAP Identity provisioning with the same credentials of SAP Identity Authentication Services.
User Management
The below diagram outlines the end-to-end process steps involved in user management within SAP Central Business Configuration. The highlighted steps are manual checks to ensure initial password resets have been carried out. Once you complete the activity of resetting the password in the admin console, you will be able to access the Identity Authentication system. Let’s start the further process, step by step.
Note: User Group ‘SAP_CBC_CONSUMPTION_PROGRAM_LEAD’ is pre-assigned to the IT administrator as part of the CBC tenant provisioning process.
Central Business User Management Process diagram
Creating Business Users and Providing Access Rights :
First step is to go to home page and go into user management, click on ‘Add’ button create new user with the help of basic details of user and click on save. After that you will see that user is created in the system and user will receive an activation email as well.
Assigning User Groups:
For the next activity you need to choose the user group section in Identity Authentication System, click on assign user groups, and there you will find all the standard user groups are visible.
Next step that you need to do is assign the users groups to the users, these user groups are nothing but our prerequisites.
Please note: All the below-mentioned user groups that are relevant to Central Business Configurations are pre delivered with Identity Authentication Services.
User Groups:
User Groups with description
For the next activity in the Identity Authentication System and choose user group section, click on assign user groups, there you will find all the standard user groups are visible. You can click on the user group and assign the user groups by clicking on the ‘Add’ button shown in the below image.
Based on the access requirement you can assign the specific user group to the user, by clicking on the add button under the required role as shown in below image.
Please note: For every business user, verify that the status is Active, and the Login Name and Display Name fields are maintained to avoid access issues.
Replication of User from IAS to CBC
The next step is to replicating users and user groups from the Identity Authentication System to Central Business Configurations. Here you need to go to the Identity Provisioning tab and click on the ‘Source Systems’ to run the background job with Identity Authentication as source system. Once this activity completes, the newly created user with assigned user groups will be available in the Central Business Configuration System.
You can check and confirm via logging in to the Central Business Configuration System (Central Business Configuration URL is available in the handover mail from SAP).
Please Note: Whenever there is a change in the login name for the user as a result of uploading the IDP file from the S/4 HANA Cloud system to the Identity Authentication Service system as per the help link make sure that background jobs in Identity Provision Services for Identity Authentication System as source system needs to be run.
System Landscape
Based on the emails received by the customer, the below diagram shows the different systems involved:
Note: User groups are used only in SAP Central Business Configuration.
Identity Authentication System: The Identity Authentication service provides you with controlled cloud-based access to business processes, applications, and data. It simplifies your user experience through authentication mechanisms, single sign-on, on-premise integration, and convenient self-service options.
Identity Authentication System shared across SAP Central Business Configuration, SAP S/4HANA, Starter, and Quality tenants. Like before SAP S/4HANA Cloud Production system has a separate productive Identity Authentication tenant.
Identity Provisioning System: Identity Provisioning system acts like a bridge between SAP Central Business Configuration and Identity Authentication System,
Manage identity lifecycle processes for cloud and on-premise systems. The Identity Provisioning service automates identity lifecycle processes. It helps you provision identities and their authorizations to various cloud and on-premise business applications.
Note: IPS tenants which were provisioned in the second half of March 2022 or later, IAS administrators can access IPS directly (with IAS credentials), the S-user is no longer required. In IAS, the attribute “Manage Identity Provisioning” must be active for the administrator.
Central Business Configuration: As I mentioned SAP Central Business Configuration is a new tool that will make it possible to configure business processes spanning multiple SAP cloud solutions from one central place. To start with, SAP Central Business Configuration supports SAP S/4HANA Cloud implementation experience. SAP Central Business Configuration is connected to S/4 HANA Starter, Quality, and Production systems.
User management in SAP S/4HANA Cloud remains the same as before.
For further details about SAP Central Business Configuration please refer below blogposts:
Now you would be able to define the users in SAP S/4 HANA Central Business Configuration. Please let me know if you have any feedback or comments.
| User | Count |
|---|---|
| 8 | |
| 5 | |
| 3 | |
| 3 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 |
