GRC does not support provisioning to SAP Data Service system, however you can still use GRC to control provisioning to DS by splitting the access requests based on the system, sending DS roles to a separate stage (new path) for manual provisioning.
Another way to automate is to use the dummy roles in a ABAP system (SAP BW) that corresponds to roles in roles (or folder level access) in the SAP DS application. We can setup a sync job between SAP BW and SAP DS that synchronizes the roles between SAP BW and SAP DS. In this way you can indirectly control provisioning into SAP DS
Alternatively you can create an entire separate request only for BODS roles and have the manual provisioning also set for that path. It is configurable, but the provisioning will be done manually, and for instance, a notification should be sent to the security team to execute the manual assignment.
Please refer to the SAP note 2529913
Bluesky
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.