The following table provides information about the account attributes that are specific to SAP Access Control. Refer to the documentation for the SAP Access Control web services and SAP Access Control for information about general SAP attributes. Unless stated otherwise, all attribute types are String.
Identity System User Attribute |
Resource User Attribute |
Description |
---|---|---|
firstname |
firstname |
Required. The user's first name. |
lastname |
lastname |
Required. The user's last name. |
|
|
Required. The email assigned to the user. |
acUserId |
userId |
Required. The User ID for the Access Control account. |
acManagerId |
managerId |
Required if a Manager stage is configured. The account ID of the user's manager. |
acManagerFirstname |
managerFirstname |
Required if a Manager stage is configured. The manager's first name. |
acManagerLastname |
managerLastname |
Required if a Manager stage is configured. The manager's last name. |
acManagerEmail |
managerEmail |
Required if a Manager stage is configured. The email assigned to the manager. This value must be a valid, existing value in Access Control. |
acRequestorId |
requestorId |
Required. The user ID of the person requesting the account. |
acRequestorFirstname |
requestorFirstname |
Required. The requestor.s first name. |
acRequestorLastname |
requestorLastname |
Required. The requestor.s last name. |
acRequestorEmail |
requestorEmail |
Required. The email address of the requestor. |
acApplications |
applications |
Required. The applications to grant access to. This value is a comma-separated list. |
acRoles |
rolesObject |
Required. Complex data type.The roles assigned to the user. This attribute contains values for ValidFrom, ValidTo, Rolename, CoApplicationId, and Company. |
acPriority |
priority |
Required. The priority of the request |
acEmployeeType |
employeeType |
The employment status of the user. |
acCustomFields |
customFieldsObject |
Complex data type. Additional fields for the user. |
acFunctionalArea |
functionalArea |
SAP functional area for the user. Valid only if 5.3 SP9 is selected as the version of the resource. |
acValidFrom |
validFrom |
The first date the user is valid. Valid only if 5.3 SP9 is selected as the version of the resource. |
acValidTo |
validTo |
The last date the user is valid. Valid only if 5.3 SP9 is selected as the version of the resource. |
acManagerTelephone |
managerTelephone |
The telephone number of the user's manager. Valid only if 5.3 SP9 is selected as the version of the resource. |
acRequestorTelephone |
requestorTelephone |
The telephone number of the requestor. Valid only if 5.3 SP9 is selected as the version of the resource. |
acSNCName |
sNCName |
The Secure Network Communications user name. Valid only if 5.3 SP9 is selected as the version of the resource. |
acUnsecureLogon |
unsecureLogon |
Allows the use of the unsecure logon feature. The value of this attribute must be “true” or “false” and be of type String. Valid only if 5.3 SP9 is selected as the version of the resource. |