You can add users in Access Risk Management and assign roles to them to determine what actions they can take in the application. For example, users with the Emergency Access Approval role can evaluate whether an access request should be approved.
Select the menu icon and choose USER MANAGER to see the users currently in Access Risk Management. You can add multiple users at once or individually.
Add multiple users at once by selecting Import and uploading an .xlsx file that contains the specific user info required. Select Export to download the bulk import template that you'll need to use for this .xlsx file.
Add users individually by selecting + Add Users and filling in the user details.
Include the ERP User Id if the user will be an access reviewer or be able to request and receive temporary elevated access.
Add the SSO name if you have configured SSO and expect the user to use the SSO option to log in to Access Risk Management.
You can also see, add, assign user roles, and enable access contexts from this screen.
Assigning Roles to Users
You can assign roles that will determine what level of access a user can have and what actions they can take. To assign a role to a user, select + Add User Roles under User Roles Selection.
Downloading User Change Logs
In USER MANAGEMENT, select Change Logs to be redirected to the Activity History page. Select Download to download a .csv of the logs.
It may take a moment for the change log to generate and the Download button to display. Select the Refresh icon above the Action column to update the Activity History page.
Creating Access Contexts
Access contexts allow administrators to restrict what users see in the online reports. Access contexts can also be used to filter between different sets of users if someone has multiple access contexts assigned to them.
To set up access contexts:
Select the toggle to enable access contexts.
Select Add to create a new access context.
Name the access context.
Use the Column dropdown menu to select the criteria you want to filter users by, such as country or department. To create custom columns, contact Access Risk Management support.
Enter the value you want associated with your criteria. For example, you might select "country" as your column and enter "United States" as your value to filter users based on if they are in the US.
When creating or editing users, you can select + Add Access Context to restrict the SAP users that the Access Risk Management users can see in online reports. You can edit existing users by selecting the Edit icon on the USER MANAGEMENT page.
Scheduling Automatic Logouts
You can schedule the days, hours, minutes, and seconds after which an idle user will be automatically logged out. Select CUSTOMER SETTINGS, choose your times, and select Schedule.