This article outlines on how to handle a User Creation request for CGI IS users.
Document to refer
This is the document given by Solvay and should be referred to get any details related to the IS User management. Also has all the details related to what roles are to be given and who are the approvers.
IMP Note : Refer to this document all the time.
Identifying the Tickets :
For any new IS user creation (Stellar or CGI Users), the ticket will come in the below format. This is the standard user creation template used by stellar team and it will be created by the management, so no approvals are needed. In this template, you get the information of the new user to be created with a reference user and also the list of systems to be given access to. There is also information about Solman system access.
Best Practice
The best practice is to check the user and the reference user are present in IDM or not. If the new user is present, check if the user has any Business roles. If yes, we need to check if they are the same as of the reference user.
In case any backend privleges are assigned for Production and Development system, they should be removed before adding the new roles to avoid conflict.
Approvals :
For any CGI user, the manager should always be Frederic Colombian in IDM system. If the ticket comes from the above mentioned standard template we don't need any approvals as it has all the managers in the cc of the ticket.
Identifying the User Department:
You can identify the user department of the user in the ticket raised or you can check with the reference user provided and give the same access.
Providing access:
You can refer to the IS User Document in which you have all the details related to which Business role should be provided to which user. You can take the reference user's Business roles from IDM and can provide the same.
Please make sure that for all the CGI users the Business roles are designed with CGI name in it as you can see in the below screenshot.
Must Follow
For any IS user the basic Standard role should be provided irrespective of any department.
For any CGI user the Business role IS - CGI - STD ROLE should always be provided which gives access to all the display access in all the SAP systems in the role. This role gives access to Solman IS Representative User access.
Also when there is a request for a new IS user to be created with the same access like a reference user, the only roles allowed are those indicated above in the exceptions list.
In addition to the mentioned Business roles in the sheet there are also few exceptions which are mentioned in the IS User Document.
The exception ones, also if present, need the specific approval of the indicated owner.
For the systems not included in the above roles list (in FF scope), the reference user could be OK.
Add the roles for the users as per the ticket through IDM and update the managers who have to approve the requests in the ticket.
Once the requests are approved by the managers in IDM as per process, the user will have access to all the required SAP access same as of the reference user. The ticket can be resolved.
This is how you create and provide a new Stellar or CGI user in the required SAP systems.
1 Comment
Nipun Tomar
Approved.