Show TOC

Function documentationIdentity Management for SAP Supplier Relationship Management (SAP SRM) Locate this document in the navigation structure

 

SAP NetWeaver Identity Management is used to automatically create and update identities with corresponding authorizations for employees in SAP Supplier Relationship Management (SAP SRM). SAP NetWeaver Identity Management can be used with SAP ERP Human Capital Management (SAP ERP HCM) only.

Employee data is sent from SAP ERP HCM to SAP SRM using Application Link Enabling (ALE). Corresponding identities are created automatically in SAP NetWeaver Identity Management while the employee data is uploaded from SAP ERP HCM to SAP NetWeaver Identity Management using report RPLDAP_EXTRACT_ID.

Prerequisites

  • You have installed SAP NetWeaver Identity Management 7.1 or higher.

  • You have installed SAP SRM 7.0.

  • You have installed SAP ERP HCM (as of Enhancement Package 4 for SAP ERP 6.0).

  • The PFCG roles available for business roles in SAP SRM have been loaded into SAP NetWeaver Identity Management

    Note Note

    The following PFCG roles are available in SAP SRM and SAP SRM Procurement for Public Sector (SAP SRM PPS):

    • /SAPSRM/ACCOUNTANT (SAP SRM: Invoice Verification Clerk)

    • SAP_BW_SRM_ACCOUNTANT (Accounts Payable Accountant)

    • /SAPSRM/ADMINISTRATOR (SAP SRM: Administrator)

    • /SAPSRM/BIDDER (SAP SRM: Bidder)

    • /SAPSRM/EMPLOYEE (SAP SRM: Employee)

    • /SAPSRM/MANAGER (SAP SRM: Manager)

    • SAP_BW_SRM_MANAGER (Manager)

    • /SAPSRM/OP_PURCHASER (SAP SRM: Operational Purchaser)

    • SAP_BW_SRM_OPER_PURCHASER (Operational Purchaser)

    • /SAPSRM/PLANNER (SAP SRM: Component Planner)

    • /SAPSRM/RECIPIENT (SAP SRM: Internal Dispatcher)

    • SAP_BW_SRM_RECIPIENT (Goods Recipient)

    • /SAPSRM/SECRETARY (SAP SRM: Purchasing Assistant)

    • SAP_BW_SRM_PURCHASING_ASSIST (Purchasing Assistant)

    • /SAPSRM/ST_PURCHASER (SAP SRM: Strategic Purchaser)

    • SAP_BW_SRM_STRAT_PURCHASER (Strategic Buyer)

    • /SAPSRM/SUPPLIER (SAP SRM: Supplier)

    • SAP_BW_SRM_SUPPLIER (Supplier)

    • /SAPSRM/SURVEY_OWNER (SAP SRM: Survey Responsible)

    • /SAPSRM/SURVEY_REVIEWER (SAP SRM: Survey Reviewer)

    • /SAPPSSRM/BIDDER (SAP SRM PPS: Bidder)

    • /SAPPSSRM/EMPLOYEE (SAP SRM PPS: Employee)

    • /SAPPSSRM/MANAGER (SAP SRM PPS: Manager)

    • /SAPPSSRM/PROCUREMENT (SAP SRM PPS: Procurement)

    • /SAPPSSRM/REQUISITIONING (SAP SRM PPS: Requisitioning)

    End of the note.

  • The portal roles available for business roles in SAP SRM have been loaded into SAP NetWeaver Identity Management

    Note Note

    The following portal roles are available in SAP SRM and SAP SRM Procurement for Public Sector (SAP SRM PPS):

    • Invoicer (SAP SRM/SAP NetWeaver BI)

    • SRM Administrator (SAP SRM)

    • Bidder (SAP SRM/SAP SRM PPS)

    • Employee (SAP SRM/SAP SRM PPS)

    • Manager (SAP SRM/SAP SRM PPS)

    • Operational Purchaser (SAP SRM/SAP NetWeaver BI)

    • Component Planner (SAP SRM)

    • Goods Recipient (SAP SRM)

    • Purchasing Assistant (SAP SRM/SAP NetWeaver BI)

    • Strategic Purchaser (SAP SRM/SAP NetWeaver BI)

    • Supplier (SAP SRM/SAP NetWeaver BI)

    • Supplier Survey Cockpit (SAP SRM)

    • Procurement (SAP SRM PPS)

    • Requisitioning (SAP SRM PPS)

    End of the note.

  • ALE distribution of organizational objects (Organizational Unit, Position, Person) from SAP ERP HCM to SAP SRM have to be setup.

  • To ensure that the employee is created in SAP SRM, and to avoid the assignment of employees to nonexistent user accounts in SAP SRM, you have performed the following configuration of the ALE inbound process in SAP SRM:

    In the group Create Relationship to User (HRALX-USRAC) in table T77S0, you have set the value to SPACE. This prevents the creation of a relationship between employee and user in SAP SRM.

Features

In SAP SRM, the combination of a user account, a business partner, and a central person is needed so that SAP SRM processes can handle users correctly. The central person is required to establish the relationship between a user account and a business partner, and is assigned to both the user account and the business partner to link them together.

The combination of a user account, a business partner, and a central person is created automatically, as described in the following use case:

When an administrator creates a new employee in SAP ERP HCM, the data is replicated to SAP SRM using ALE. The data that is transferred includes the complete organizational data of the employee. You can display the data in SAP SRM, but you cannot change it.

The corresponding identity is created automatically in SAP NetWeaver Identity Management. An administrator must then assign the correct business role to this identity, so that the user has the correct authorizations to start working in SAP SRM using the SAP NetWeaver Portal.

In SAP SRM, an employee, and a central person are created from the data received from SAP ERP HCM. The user account is created from the data received from SAP NetWeaver Identity Management. The assignment of the user account to the employee, based on the matching personnel number, is a manual task and needs to be performed in SAP SRM by an administrator.

PFCG roles are required for the user account created in SAP SRM and enable the user to have access to the SRM back-end system.

Portal roles are required for the user created in the SAP NetWeaver portal and enable the user to have access to the corresponding work center in the portal.

If a business role has been assigned to the identity in SAP NetWeaver Identity Management, the corresponding PFCG roles and portal roles are automatically determined. The PFCG roles of the business role assigned in SAP NetWeaver Identity Management are automatically assigned to the user account in SAP SRM, including the relevant authorizations. The portal roles of the business role assigned in SAP NetWeaver Identity Management are automatically assigned to the user in the SAP NetWeaver Portal.

Example

If an identity is assigned to a business role in SAP NetWeaver Identity Management, which includes the PFCG role /SAPSRM/EMPLOYEE and the portal role for the employee self-service, then a user will be created in the SAP SRM back end as well as in the portal with the required authorizations.

Changes to the employee in SAP ERP HCM or to the identity in SAP NetWeaver Identity Management (for example, the assignment of a new business role) are updated automatically in SAP SRM. This occurs through a similar process as in the initial creation, but results in changes to the existing employee or user account rather than the creation of new employees or user accounts.

More Information

For more information, see SAP Library for SAP Supplier Relationship Management on SAP Help Portal at http://help.sap.com.