SAP Knowledge Base Article - Public

2187208 - RBP Static Permission Group

Symptom

RBP Static Permission Group

Environment

Static Permission Group

Resolution

In the past, there was no import function available to include a static list of users into a permission group. To perform this action, the Admin needed to add them manually one by one, using the “username” filter in dynamic permission group definition. Also, when the users number becomes large, the performance for group maintenance and refreshing might be slow.

As of release b1505, Admins are able to create static permission group via import function, which will not refresh when user information changes, since the group stores a static list of users instead of dynamic criteria. It is also allowed to view the members of the group and use the same as RBP target group.

               

How to identify a static group

 

                Under Admin Tools, access “Set User Permissions” and then select “Manage Permission Groups”. In this page there is a new column which indicates whether a group is dynamic or static.

 

benryanconversion.png 

How to view group detail

 

                Click on the group name > Take Action > View Summary, and the below screen will load:

benryanconversion2.png

How to create or modify static permission group

On the popup window is available a blank CSV template file to download and use to create the static permissions groups accordingly. This file contains two column headers, “GROUPNAME”, in which the Admin completes with the name of the static group, and “USERID”, in which the Admin includes the UserIDs that belong to this group.

On selecting “Import Static Groups” button, you will get two options of how you want to add - Full Replace or Delta Replace.
The Admin select the file that should be uploaded to the environment and then validate it, by clicking on “Validate File”. After validating the file successfully, the Admin may upload the file to the instance by selecting “Upload” button.  When the import has been completed, the Admin that ran it will receive an email notification regarding the status of the import.

Selecting the 'Full Replace' option, upload file with two columns :
1. GROUPNAME - Enter the exact name of the Static permission group.
2. UserID - Enter the UserID value of the user you are adding.

Selecting the 'Delta Replace' option, upload file with two columns :
1. GROUPNAME - Enter the exact name of the Static permission group.
2. UserID - Enter the UserID value of the user you are adding.
3. ACTION - 'Add'  OR 'Remove' based on the action required for a particular user entry.

Please note that this kind of import runs as a background job, which means that is not possible that more than two static permission group jobs run at the same time.

 

Important:

Please note the character encoding of the file should be Unicode(UTF-8). The max file size is 20MB. If the import file exceeds 20MB, is possible either separate the file into several smaller files or request Professional Service to modify the system configuration file.

Keywords

RBP static permission group Static Group Modify Static group Delta replace static group Full replace static group , KBA , LOD-SF-PLT-RBP , Role Based Permissions , How To

Product

SAP SuccessFactors HCM Core all versions