Typically, business managers do not have direct access to assign SAP roles or profiles to users. Instead, they must work through the SAP administrator to facilitate these assignments.
The extension for SAP environments provides a solution that enables business managers to easily make the role assignments. The solution utilizes the Roles Based Provisioning Module, Identity Manager drivers, and the Roles Mapping Administrator.
The Roles Mapping Administrator lets you map SAP roles, composite roles, and profiles (collectively referred to as SAP authorizations) to Identity Manager roles. When a user is assigned a role through the Identity Manager User Application, he or she receives all SAP authorizations mapped to that role. Or, when a role is removed from a user, all SAP authorizations that were granted through that role are removed.
The following are solutions that can be implemented in your environment to simplify business processes.