Question:
Our client planning to implement ESS using ITS ,i am new to this
can any body suggest me as a security what are my responceblities
did i get any confugaration document on that
Answer:
ESS requires every empoyee with a personnel record to have an SAP logon ID. If configured correctly there can be a generic Id used to access non user specific data, but to update benefit selections the SAP ID and reference to the personnel number needs to be unique.
ESS is quite simple when implementing NON-SAP-R/3-GUI ids. The Ids that must logon to SAP to do other work is where the access takes a bit of care.
The steps on the security side
1. get a list of tcode to be used by the ESS ids,
2. get a list of Infotypes accessed (you may need to run a ST01 authorization trace to get this)
3. add Infortype 0105 subtype 0001 to all personnel records with the ID the user has or the one you want built.
4. use tcode HRUSER to create the "missing" ids and assign access
Answer:
John, Is there any way to automate the process of creating the user (SU01) and linking it to the HR data (HRUSER)? We are trying to think of a way to get this info created a new employed is created in HR.
Kerry
Answer:
It is called security by position.
In the hiring action that HR configure you can sequence to infotype 0105 subtype 0001 and require the user id to be supplied.
You assign the ESS role to all positions (relationship 1001 type AG B007).
Then you will schedule one job with the following steps to be run at one minute after midnight.
1. custom report to sync the USTxx table
2, RHPROFL0 to create the IDs and assign access to the user, Though a copy of RHPROFL0 should be made and add the name and adress, department etc data from IT 0001 and 0002 to the user ID create information.
3. Run the report tield to tcode PFUD in batch ( do not use the PFGC_TIME_DEPENDENCY as you cannot create a variant and have it evaluate just the customer roles)
You will then have the ID created automatically and the access assigned.