User Management in EA4IT

With EA4IT, you can find inactive users and obsolete roles, to analyze users and authorizations in the Angles for SAP system, and gain insight into user activity and roles. Following are some of the important fields that can give you relevant insights:

• User name
• Last login
• Number of Angles used
• Enabled
• Role name
• Role type

Available Templates

Here is a list of Templates available in the EA4IT model for analyzing User data:

• Users: This object includes details on Angles for SAP users. The data is imported from an authentication provider. This can be a local user directory on the Angles for SAP application server or an external authentication provider, such as Active Directory.

• Authorizations in Angles for SAP are defined in roles. Roles determine what a user can do and see in Angles for SAP. This object includes user information per role. Every combination of Angles for SAP user and role has one record.

• The Audit logging Template offers actionable insight into the way in which users use Angles for SAP, for example,

  • usage and user statistics per time period, for example, measure and analyze usage and trends per user and/or Angle

  • who created, updated, executed or deleted an Angle
  • who exported the results
  • who uses Angles for SAP actively
  • what Angles are used for

• The Model Role Fields Template provides insight into the Angles for SAP Model Role Fields and related privileges.

• The Model Role Filters Template provides insight into the Angles for SAP Model Role Filters and related privileges.

• The Model Role Labels Template provides insight in the Angles for SAP Model Roles Labels and related privileges.

• The Model Role Objects Template provides insight into the Angles for SAP Model Roles Objects and related privileges.

• The Model Roles Template provides insight into the Angles for SAP Model Roles and related privileges.

• The System Roles Template provides insight into the Angles for SAP System Roles and related privileges.

Sample Use case 1: Identifying users that have the 'Manage model' privilege

An admin user would like to see 'Manage model' privileges, in order to know who exactly is able to make changes to the system through the IT Management Console.

To check who can make changes to the system through the IT Management Console

1. Open TemplateAuthorizations.

   The Basic List view appears.

2. Click on the + in the top-left corner of the Basic List to add a new field.

   The Insert column window appears.

3. Select Can manage model and click Insert column.

   The column will be added to the far right of the Basic List. Optionally, you can change its position by dragging it.

4. Click on the column header Can manage model and click Create pivot.

   The pivot shows how many users can manage the model (true), and how many users cannot manage the model (false). Double-click a value to drill down.

Sample Use case 2: Which Angles are used at month-end closing

An admin user would like to know which Angles are used during the month-end closing.

To check which Angles are used during month-end closing

1. Open Template Audit Log.

   The Basic List view appears.

2. Click on the column header of Action and click Add filter.

3. Add filter Execute and click OK.

4. Click on column header Created and click Pivot.

5. In the configuration bar on the left, click (Self) – Created [Per quarter].

6. Click Created, change to bucket Per week, and click Apply.

7. Drill down on the week of month-end closing.

8. Click on column header Target name and click Pivot.

   The pivot shows which Angles are used during month-end closing.