SNC name GRC access request - Two or More Domains

[rajashekar_chandrashekar]

Dear Team,

Current Set Up: -

Currently we have an SNC name updated at below location.

Go to SPRO-->Governance, Risk and Compliance-->Access Control-->User Provisioning-->

Maintain End User Personalization-->Maintain EUP Fields-->We can customize the settings for SNC field here.

for example: -

p:#!#USERID#!#@xxxx.xxxxxx.xxx

New requirement: -

We have new domain added as for example " p:#!#USERID#!#@xxxxxxxxxxx.xxxxxxxxx.xxxxx " for new set of users.

Question A: -

Can this be added at the same location at " Go to SPRO-->Governance, Risk and Compliance-->Access Control-->User Provisioning-->

Maintain End User Personalization-->Maintain EUP Fields-->We can customize the settings for SNC field here " as: -

SNC name 1 = p:#!#USERID#!#@xxxx.xxxxxx.xxxx

SNC name 2 = p:#!#USERID#!#@xxxxxxxxxxx.xxxxxxxxx.xxxxxx

Is this valid entry ?

Question B: -

Is there a field which can be used to identifier or differentiator between user id's of domain 1 who should be updated with SNC name 1

And

Another set of user id's of domain 2 who should be updated with SNC name 2.

Thanks raj

[dyaryura]

Hi Raj

If you provision only using template based request you might be able to achieve it using two EUP configs and assign each one to a specific template request.

I had a similar problem with a requirement to temporarily provision different SNC names per system and we ended up with some customization/enhancement in the class CL_GRAC_AD_ACCESS_MGMT_RFC for methods CREATE_USER and CHANGE_USER working with the "ls_create_user_out-is_snc-pname".

I think a BADI should be provided by SAP to do this but since this is probably not a common scenario SAP has not included one so far. We requested some options some time ago for the system specific SNC names and no option was available at that moment but you might want to re-check.

Thanks

Diego