DOCSEARCHbyAlgolia
Submit Docs

Identyrise User Lifecycle Management (ULM)

website·Indexed 30 days ago

https://docs.identyrise.com

A collection of cross-device applications for user lifecycle management, featuring a central Launchpad, request management, recertification campaigns, and reporting. Includes tools for user creation, master data changes, permission management, and SAP Fiori Launchpad integration.

Tokens
5.2K
Snippets
0
Records
33
Agent score
50%

What's inside Identyrise ULM

  1. Overview of Identyrise User Lifecycle Management (ULM)

    Identyrise User Lifecycle Management (ULM) is a suite of cross-device applications designed to manage the entire user lifecycle for both SAP and non-SAP users. It provides tools for user creation, functional permission assignment, and various self-service options. Key supported processes include:

    • Adding or removing permissions (SAP and non-SAP)
    • Business role concept support
    • Master data modification (including self-service)
    • User account decommissioning and reactivation
    • User reporting and history
    • Recertification
    • Password reset and unlocking (available as an additional licensed product)

    ULM is built on SAP's UI5 framework using the Neptune DX Platform (SAP Edition), making it installable on SAP systems starting from version 7.0.1. Every process step is based on a request (Antrag), with dedicated log entries for requests and background processes to ensure transparency and audit compliance (IKS).

  2. Analyze application status using the Dashboard Reporting app

    The Dashboard app provides a visual overview of current application types, processing statuses, and Key Performance Indicators (KPIs). It is used for rapid analysis of approval and processing situations through two primary views:

    1. Application Type (Antragstyp): Displays the number of applications of a specific type (e.g., New Creation, Permission Change, Decommissioning) currently in each phase, including the average processing time per type in hours.
    2. Stages (Stufen): Shows the distribution of all applications across processing stages (e.g., In Administration, In Approval, In DSR Review, In GxP Review), including the average processing time per stage.

  3. Audit manual recertifications using the 'Auditiere man. Rezertifizierungen' app

    The 'Auditiere man. Rezertifizierungen' app provides an overview of the status of manual recertifications based on configured recertification intervals and periods.

    Workflow:

    1. Open the app via the Launchpad.
    2. Apply filters in the header area to narrow results by:
      • Permission/Role type
      • Permission ID (technical name)
      • Permission description
      • System ID
      • Auditor
      • Audit date (start date)
    3. Navigate the results list using the tabs to switch between:
      • Current (completed) recertifications
      • Outdated (completed) recertifications
      • Future (open) recertifications

    Available Actions:

    • View Approvers: Click the 'Details' button to display the assigned (level) approvers and their contact details for a specific permission.
    • View Permission Details: Single-click a row in the results list to view detailed information about the permission and a list of all other users who possess that same permission.

  4. Configure ULM Launchpad and Access Control

    ULM includes its own Launchpad based on Neptune DXP technology and a policy-based access concept. The user interface can be customized for specific clients, and multiple layouts can be configured to allow end-users to switch between different work environments. Additionally, ULM can be integrated into an SAP Fiori Launchpad.

  5. Access and use the ULM Launchpad

    The ULM Launchpad serves as the central entry point for all ULM applications. It provides a role-based tile overview, ensuring users only see applications and functions they are authorized to access. The Launchpad starts automatically after system login or can be accessed manually via its URL. Users can navigate the Launchpad using a search function to find apps quickly, group tiles by category, or save apps as favorites for personalization.

  6. Manage ULM Launchpad and Application access via Policies

    Access to the ULM Launchpad, its categories, and the executable applications (Apps) within them is controlled via a specific permission concept (Policies) managed within the Neptune Cockpit. If certain apps mentioned in the documentation are not visible or accessible, it is likely due to these policy restrictions and should be addressed by the ULM Administrator.

  7. Manage team members using the Mein Team app

    The 'Mein Team' app allows the logged-in user to manage their assigned team members, which is used for application representation (Antragsvertretung) and reporting visibility. The app provides a personal overview including the user's name, email, number of team members, and open requests. Users can manage the team list via a filterable table with the following capabilities:

    • Add a single new user to the team.
    • Add multiple team members simultaneously.
    • Remove a single existing team member from the list.
    • Remove multiple team members simultaneously using the table's multi-select functionality.

  8. Research approved or rejected requests using ULM Revision Reporting

    The 'ULM Revision Reporting' app is used to evaluate and research approved or rejected requests for auditing and revision purposes. Users can filter requests using the header fields and view the results in a tabular overview. The results table includes details such as User, Role Type, Action, Requester, Approver, and Provisioning Date. Clicking on a Request ID in the results list navigates the user directly to that specific request.

  9. Generate user and permission reports using the Reporting User app

    The 'Reporting User' app allows administrators to view a comprehensive overview and request history for specific users and their associated permissions across all relevant systems.

    Workflow to find a user for reporting:

    1. Launch the App: Open the 'Reporting User' app via the Launchpad to open the user search interface.
    2. Filter and Select Users: Use the header area to locate users via two methods:
      • User Tab: Search for users based on specific criteria. Click a user from the results list to select them for reporting.
      • Permissions Tab: Use the 'Permission Search' (Berechtigungssuche) functionality to search for specific permissions and identify all users who possess them. Click a user from this list to select them for reporting.
    3. View User Details: Once a user is selected, the detail view displays their information across various tabs.
    4. Audit Request History: In the request history view, the Request ID (AntragsID) is hyperlinked, allowing you to click through directly to the original request.

  10. Modify user permissions using the Change Permissions app

    The 'Change Permissions' (Berechtigungen ändern) app allows administrators or users to request changes to an existing user's access rights. These changes are submitted as a request and automatically enter an approval process. The app supports three primary functions, which can be used individually or combined in a single request:

    1. Assign new permissions: Add new roles or specific permissions to a user.
    2. Revoke permissions: Remove existing roles or permissions from a user.
    3. Modify validity periods: Change the expiration or start dates of existing roles/permissions.

    Workflow steps to complete a request:

    • Launch: Open the app via the Launchpad.
    • User Selection: Use the 'Search User' (Benutzer suchen) cross-function button to select the target user.
    • Edit Permissions: Add, remove, or change the validity of roles/permissions.
    • Local System Data: Modify values in available system data fields if necessary.
    • Attachments: Upload supporting documentation (maximum file size: 5 MB per file).
    • Justification: Enter a mandatory short note explaining the reason for the changes.
    • Submission: Save the request to trigger the automatic approval workflow.

  11. Manage and process requests using the Antragsbearbeitung app

    The 'Antragsbearbeitung' app serves as the central workspace for ULM process participants to review, approve, reject, or return submitted requests for further processing. It can be accessed via the Launchpad or through DeepLinks integrated into MS Outlook, MS Teams (via Integration Cards), or other mail systems.

    Key operational steps include:

    1. Search and Filter: Use the list view and header filter to find requests by application number, application type, application level, applicant, or requested user.
    2. Review: Click a request in the results list to open it for inspection or editing based on the user's role in the approval process.
    3. Decision Making:
      • Global Decisions: Use the footer buttons to 'Approve' (Genehmigen) or 'Reject' (Ablehnen) the entire request.
      • Granular Decisions: Perform 'Partial Approvals' (Teilgenehmigung) by approving or rejecting individual rights on a line-item basis within the request before submitting the final global decision.
    4. Documentation: A short justification (Anmerkung) is a mandatory field when making a decision.
    5. Finalization: Saving the decision documents the action and triggers subsequent workflows, such as provisioning or blocking.

  12. Create a new recertification campaign in Identyrise

    To start a recertification campaign, open the app via the launchpad. You can either create a new campaign from scratch by clicking the '+' button in the top right of the UI or use an existing campaign as a template by searching for it in the header area and copying it.