This website is not affiliated with, sponsored by, or approved by SAP AG.

LICENSE_ATTRIBUTES and assigning license to roles

SAP Security

Moderators: Snowy, thx4allthefish, jurjen

LICENSE_ATTRIBUTES and assigning license to roles

Postby Gary Morris » Tue Feb 17, 2015 10:50 am

Does anyone have experience with LICENSE_ATTRIBUTE transaction for assigning USMM licensing to Roles instead of users?

What are the benefits of using this method?

What are the problems with this method?

Are there "gotchas" I need to be aware of?

Does anyone have links to good docuemtation or white papers / presentations / examples that are more verbose than one page SAP documentation on the transaction?

Thanks!
Gary Morris
SAP Security Consultant
garydavidmorris@gmail.com
Gary Morris
 
Posts: 399
Joined: Sun Oct 20, 2002 10:42 pm
Location: San Antonio, Texas

Re: LICENSE_ATTRIBUTES and assigning license to roles

Postby henrik » Sun Mar 15, 2015 9:25 pm

Hi Gary,
I have implemented this a couple of times with clients, and it works quite well.
Don't assign license type to the users at all, and let the system do the calculation for you.

I have used it with IdM scenarios, where it can be difficult to "calculate" the right license type to assign. By having it on role level, all that is taken care of for you.
I don't actually have any useful documentation around this, but it's quite straight-forward.

Hope that helps a little...

/henrik
www.turnkeyconsulting.com.au
henrik
 
Posts: 493
Joined: Wed Oct 23, 2002 6:38 am
Location: London, UK

Re: LICENSE_ATTRIBUTES and assigning license to roles

Postby Gary Morris » Mon Mar 16, 2015 2:50 pm

Thanks henrik
Gary Morris
SAP Security Consultant
garydavidmorris@gmail.com
Gary Morris
 
Posts: 399
Joined: Sun Oct 20, 2002 10:42 pm
Location: San Antonio, Texas

Re: LICENSE_ATTRIBUTES and assigning license to roles

Postby os » Sun Nov 15, 2015 5:06 pm

You must be careful with IDM in this case if you want to centrally evaluate the user license and write it back to the local classification. The User Bapis dont support this attribute on all releases.

Where it works wonders is with internal cost distribution. If you license by role assignment and charge internally via the same model, then "the business" has an incentive to design meaningful single roles and request that roles no longer required are also unassigned. What better incentive than that to trigger sensible design and removal of no longer needed access :-)
os
 
Posts: 469
Joined: Wed Dec 21, 2005 10:51 am


Return to SAP Security

Who is online

Users browsing this forum: Google Adsense [Bot] and 7 guests





loading...


This website is not affiliated with, sponsored by, or approved by SAP AG.