SAP Knowledge Base Article - Public

2198153 - How does a Cloud Administrator add/remove S-User ID authorizations - SAP ONE Support Launchpad

Symptom

  • How does a Cloud Administrator add or remove authorizations
  • Update authorizations
  • Remove user permissions
  • Add user permissions
  • Establish Cloud Administrator
  • Cannot update user authorizations
  • Unable to access the ONE Support Launchpad
  • SuccessFactors Cloud Administrator
  • User is not able to create an incident in the launchpad
  • Create another Cloud Administrator
  • How to assign authorizations so a user can access the launchpad
  • What authorizations are needed for a Cloud Administrator
  • What authorizations are needed for a Cloud User ID

Environment

Resolution

Authorization management deals with permissions that are required to fulfill certain support-related tasks using the support applications that are offered in the SAP ONE Support Launchpad, for instance, report incidents. Most authorizations contain not only the user's right to perform a specific task, but also the level at which the user can exercise this right.

What is a Cloud Admin?
Cloud administrators have all authorizations that are required to fulfill all SAP cloud-related tasks in the SAP ONE Support Launchpad at the highest possible level. SAP creates the first S-user for new cloud customers and assigns this user these authorizations. Click HERE for information on a Cloud administrator.

There are 2 sections below: How to add authorizations to make a user a Cloud Admin or a Cloud User and How to delete authorizations

IMPORTANT INFORMATION:

  • An administrator cannot edit their own authorizations. If your authorizations need to be updated another administrator on your account will need to to do.
  • You can only assign the authorizations that you have yourself. So for example, you can only assign Display Cloud Data, if your ID has that authorization.
  • Authorizations can be assigned at different values/levels such as customer number, installation number, or Global (the highest value/level). See KBA 1898762.
  • See KBA 1271517 on how to find the list of administrators for your customer number.
  • See KBA 1614304 for steps on using the Copy User's Authorization feature.
  • User IDs must be assigned the Display Cloud Data authorization set at the Cloud Installation Number(s) level in order to use certain applications in the ONE the SAP ONE Support Launchpad. For SuccessFactors the user ID must have Display Cloud Data in order to use the incident application.

The recommended authorizations for users that are not Cloud Administrators are:

Authorization Level
Display Cloud Data Cloud installation number
Report an Incident Cloud installation number
Send Incidents to SAP Cloud installation number
Display Incidents Cloud installation number
Close Incidents Cloud installation number
Edit my Login Data

Global

The authorizations recommended for a Cloud Administrator are as follows. Click HERE for information on a Cloud administrator.

Authorization Level
Display Cloud Data Cloud installation number
Edit User Data Customer Number
Edit Authorizations Customer Number
Report an Incident Cloud installation number
Send Incidents to SAP Cloud installation number
Display Incidents Cloud installation number
Display All Incidents Global
Close Incidents Cloud installation number
Display System Data Cloud installation number
Edit all Login Data Global
Edit my Login Data

Global

Create Billable Service Requests

This is for HEC only, must be set at the HEC installation number

Create Service Requests

This is for HEC only, must be set at the HEC installation number

Section 1: How to add authorizations to make a user a Cloud Administrator or Cloud User

  1. To add or edit authorizations, logon the SAP ONE Launchpad: https://launchpad.support.sap.com
  2. Open the User Management application (or use the direct link https://launchpad.support.sap.com/#/user/management). If you do not have the tile activated, refer to KBA 2348668.

    User Management Tile 2_2017.png
  3. You can use the Users search option or simply locate the user on the Users tab 
  4. Click on the user to open the user details screen (the checkbox in front of the name does not work when you are modifying a single user).

    Users tab 12_2016.png
  5. On the AUTHORIZATIONS section, click the edit (pencil icon)

    Click Edit on Authorizations 12_16.png

  6. Authorizations are grouped by task (e.g. Incidents, System Data, etc.). You have several choices for assigning authorizations:
    • All - Click the All button to assign all authorizations
    • By task (e.g. Incidents) - Click the checkbox on the main row of that group. For example if you click the box in front of Incidents, it assigns all incident related authorizations
    • Select individual authorizations - Click on each authorization individually
  7. Authorizations are assigned automatically at the highest level (Granted for All Customer Numbers and Installations).
  8. If you want to leave the authorizations at the default level and are finished, click the Save icon (located at the top right of the AUTHORIZATIONS section). Or you can click on an authorization to set it at a more refined level.
    • Note: If your ID is a Cloud Administrator with some authorizations set to the SuccessFactors installation level only (for example the Display Cloud Data), then the new user you are modifying will be assigned that same level. You can only assign authorizations and levels for the ones you have. So, when you click Save the authorization will say Restricted to Some Customers and Installations on the authorizations that are set at the SuccessFactors installation level only.
    • For example, the user ID is a Cloud Administrator for SuccessFactors, and assigned the same authorizations they have to a new User ID. After selecting the All button, and clicking Save, this is what the new user's authorization screen will look like:

      Cloud Admin asssigned authorizations to a user.png
  9. Click the back arrow on the top left of the launchpad to get back to the Users tab

Section 2: How to delete authorizations

  1. Follow the steps above until you get to step 5.
  2. You have several choices for removing authorizations:
    • All - Click the All button to remove all authorizations
    • By task - Click the checkbox on the group. For example if you click the box in front of Incidents, all incident related authorizations will be removed.
    • Select individual authorizations - Click on each authorization individually
  3. When you are finished click Save (located at the top right of the AUTHORIZATIONS section)
  4. Click the back arrow on the top left of the launchpad to get back to the Users tab

See Also

Keywords

Cloud Admin, SF, Success Factors, permissions , KBA , success factors , cloud-admin , cloud admin , sf admin , XX-SER-SAPSMP-USR , User Administration , XX-SER-SAPSMP-LAUNCH , SAP Support Portal Launchpad , How To

Product

SAP SuccessFactors HCM Suite 1611