You can add users in Access Risk Management and assign roles to them to determine what actions they can take in the application. For example, users with the Emergency Access Approval role can approve emergency access requests.
Add multiple users at once by selecting Import and uploading an .xlsx file that contains the specific user info required. Select Export to download the bulk import template that you'll need to use for this .xlsx file.
Add users individually by selecting + Add Users and filling in the user details.
Add the SSO name if you have configured SSO and expect the user to use the SSO option to log in to Access Risk Management.
You can also see, add, assign user roles, and enable access contexts from this screen.
Assigning Roles to Users
You can assign roles that will determine what level of access a user can have and what actions they can take. To assign a role to a user, select + Add User Roles under User Roles Selection.
Downloading User Change Logs
In USER MANAGEMENT, select Change Logs to be redirected to the Activity History page. Select Download to download a .csv of the logs.
Creating Access Contexts
Access contexts allow administrators to restrict what users see in the online reports. Access contexts can also be used to filter between different sets of users if someone has multiple access contexts assigned to them.
To set up access contexts:
Select the toggle to enable access contexts.
Select Add to create a new access context.
Name the access context.
Use the Column dropdown menu to select the criteria you want to filter users by, such as country or department. To create custom columns, contact Access Risk Management support.
Enter the value you want associated with your criteria. For example, you might select "country" as your column and enter "United States" as your value to filter users based on if they are in the US.
When creating or editing users, you can select + Add Access Context to restrict the SAP users that the Access Risk Management users can see in online reports. You can edit existing users by selecting the edit icon on the USER MANAGEMENT page.
Scheduling Automatic Logouts
You can schedule the days, hours, minutes, and seconds after which an idle user will be automatically logged out. Select CUSTOMER SETTINGS, choose your times, and select Schedule.