Integrate SAP Access Control 10.0 with SAP ERP Human Capital Management

  • by Alpesh Parmar, Managing Partner, ultimumIT, Inc.
  • August 19, 2013
SAP Access Control 10.0 comes with a feature called HR Trigger. It can create a request automatically in the Access Request Management module owing to the changes in different fields (infotype and subtype) of SAP ERP Human Capital Management (SAP ERP HCM). Learn how to:
• Configure SAP Access Control 10.0 to integrate with SAP ERP HCM.
• Take advantage of the HR Trigger functionality in SAP Access Control 10.0 to automatically provision and de-provision access via HR event triggering.
Key Concept
In SAP Access Control 10.0, an HR Trigger is a feature that enables an SAP Access Control system to capture HR events such as hiring, termination, and retirement, and then use these events to provision or de-provision access depending on conditions defined in SAP Access Control 10.0.

In general, all master data is maintained in a specific SAP ERP Human Capital Management (SAP ERP HCM) system. Once a change occurs in this system, the data needs to be disseminated to other associated SAP ERP HCM systems. HR Triggers in Access Request Management provide the means to automatically transfer the changes from the SAP ERP HCM system to other systems. When an event is triggered in the SAP ERP HCM system, such as hiring a new employee, rules are applied along with its corresponding HR Trigger. The rule and HR Trigger initiate an action for the Access Request Management module to create a request for system access.

HR Trigger is a solid feature in SAP Access Control 10.0 that is underutilized because of complexity in configuration and a lack of information around use of the functionality. I walk you through a step-by-step process for HR Trigger configuration and use. I cover integration of SAP Access Control 10.0 Service Pack 11 with SAP ERP HCM 7.3 (the latest version of both SAP Access Control and SAP ERP HCM at the time this article was written).

Step 1. Install a Foundation Component on SAP GRC and Plug-In Components on SAP ERP HCM

To enable HR Trigger functionality, you need to install GRCFND_A (an SAP GRC Foundation component) on SAP Access Control, and the matching GRCPINW and GRCPIERP plug-in components on the SAP ERP ERP HCM system.

Alpesh Parmar

Alpesh Parmar is the managing partner at ultimumIT, Inc. He has over 11 years of experience in the IT field and led many SAP implementations. He is an internationally recognized and a renowned subject matter expert for SAP GRC solutions and has been speaking at different SAP conferences. His articles have been published in SAP forums, SAPinsider, and the SAPexperts GRC hub. Before founding ultimumIT, Inc., he was at Levi Strauss & Co. for almost three years serving as GRC architect/advisor. Prior to joining Levi, he was a manager at PricewaterhouseCoopers and led multiple SAP GRC engagements. He also served as implementation team lead at SAP Labs and as senior software developer at Virsa Systems. Alpesh holds a bachelor’s degree in control engineering (B.E.I.C.) from Gujarat University, in India, and a master’s degree in computer science (M.S.C.S.) from Monmouth University, in New Jersey. 

See more by this author


No comments have been submitted on this article. 

Please log in to post a comment.

To learn more about subscription access to premium content, click here.