This article outlines on how to handle a User Creation request for Solvay IS users.
Document to refer
This is the document given by Solvay and should be referred to get any details related to the IS User management. Also has all the details related to what roles are to be given and who are the approvers.
IMP Note : Refer to this document all the time.
Identifying the Tickets :
There is no template which is designed for Solvay users. It will be a direct ticket either from the manager or the users themselves. There are no prior approvals required as we will be providing access in IDM and there is a approval process workflow already designed. You can ask for reference user for clear information. You can get if the ticket is a IS user or not with the help of user's department in IDM.
Best Practice
The best practice is to check the user and the reference user are present in IDM or not. If the new user is present, check if the user has any Business roles . If yes, we need to check if they are the same as of the reference user.
In case any backend privleges are assigned for Production and Development system, they should be removed before adding the new roles to avoid conflict.
Identifying the User Department:
You can identify the user as an IS user or not with the help of the department of the user in IDM. It would be either IS Internal or SBS Project Line or GCC Service Line or IT Project Line or etc.
Providing access:
You can refer to the IS User Document in which you have all the details related to which Business role should be provided to which user. You can take the reference user's Business roles from IDM and can provide the same.
Must Follow
For any IS user the basic Standard role should be provided irrespective of any department.
For any Solvay IS user the Business role IS - SLV - STD ROLE should always be provided which gives access to all the display access in all the SAP systems in the role. This role gives access to Solman IS Representative User access.
Also when there is a request for a new IS user to be created with the same accesses like a reference user, the only roles allowed are those indicated above in the exceptions list.
In addition to the mentioned Business roles in the sheet there are also few exceptions which are mentioned in the IS User Document.
The exception ones, also if present, need the specific approval of the indicated owner.
For the systems not included in the above roles list (in FF scope), the reference user could be ok.
Add the roles for the users as per the ticket through IDM and update the managers who have to approve the requests in the ticket.
Once the requests are approved by the managers in IDM as per process, the user will have access to all the required SAP access same as of the reference user. The ticket can be resolved.
Tag to add
Make sure add the tag " IS User Mgmt " in Freshdesk before you resolve the ticket.
This is how you create and provide a new IS user in the required SAP systems.