Integration of UMERoles with ABAP Roles

In installations in which the user management engine (UME) uses an ABAP back-end system as a data source for its user data, ABAP roles are integrated as follows:

• ABAP roles appear as groups in identity management
• ABAP role assignments appear as user-to-group assignments in identity management

To integrate the authorizations provided by security roles and UMEroles with ABAP roles, you can assign the group in identity management, that corresponds to the ABAP role, to the required UMEroles. Then assign the UME actions, that correspond to the security roles, to the required UME roles.

The following figure illustrates the integration of JEE security roles, UMEroles, and ABAP roles.