Overview
Using the Access on Hire2Retire
you can provision and deprovision users on SAPConcur.
Read the official documentation of SAPConcur here.
Define Role Definition¶
Provisioning Type¶
Define Role(s)¶
You can assign a Role to any user based on their AD attributes. You can define complex conditions using AND and OR logic. You can also use thee Group memberships in AD to define Roles. The Roles are used to assign specific privileges and licenses in SAPConcur.
Map the rules defined in first table with the Roles provided by SAPConcur.
- Roles in SAPConcur are a way to group together users who have similar responsibilities. These roles determine what actions a user can perform and which parts of the system they can access. SAP Concur offers a role-based access control system to manage user access and permissions efficiently.
You can enable the "Do not deprovision upon change of profile or role" checkbox to prevent users from being deprovisioned on SAP Concur due to a role mismatch.
You can also select default roles in SAPConcur. For if and only if 'Developer' Role is passed and it is not mapped in the second table then the selected default Profile, Role in SAPConcur and Permission Set(s) will be assigned to the user(s).
Process All Employees¶
All user(s) will be provisioned on SAPConcur.
Provision User¶
You can decide to either provision or deprovision user(s) using Access.
-
Provisioning - You can provision one or more user(s) to the SAP Concur according to the requirement. User(s) can be created, updated or reactivated in provisioning operation.
-
Deprovisioning - You can deprovision one or more user(s) according to the requirement. User accounts will be deactivated on SAP Concur upon deprovisioning.
Map attributes on SAPConcur¶
You can select the attributes provided by SAPConcur that you want to populate. You can map values from AD/Entra ID/Hybrid to populate these attributes. You can also use Hire2Retire's powerful data transformation capabilities using Excel Style functions.