Share all details related to your problem, including any error messages you may have received.
Hi team,
The ootb connector of sap direct, has to obtain roles and profiles, and within the roles are the TCODES. That is supposed to be the transactions that each role has and should bring the list with those transactions. But when doing the aggregation of groups, it does not bring us the TCODES. We confirmed with the SAP team that these roles do have transactions but they do not appear in SailPoint.
For Group aggregation, for getting a role and its associated type,profiles,tcodes,description, the SAP connector calls BAPI RFC_READ_TABLE to read data from below tables,
AGR_FLAGS
AGR_TEXTS
AGR_PROF
AGR_TCODES
Can you confirm these return the data seen in IIQ?
Do you see an error in the logs related to the aggregation such as data truncation?
You’ve specified IdentityIQ version 8.3. Have you applied the p3 patch? There have been some fixes for the SAP connector in the p2 and p3 patches.
To do that we did a trace from SAP to see which tables are interfering. And the only thing it runs is AGR_TEXTS, USRSYSACTT, USRSYSACT. It does not bring the other AGR you mentioned. Remember that this is a CUA system.
The logs do not show any error and patch 3 is applied.