Getting Started with Administration

SAP SuccessFactors offers different levels of administration to manage the amount of control each user has in the system. There are three basic levels of system administration:

• Super Administrator

  The Super Administrator is created in Provisioning. This administrator grants permission to others so that they can become a Super Administrator, Security Administrator, or a regular administrator.

• Security Administrator

  The Security Administrator is responsible for managing all security through roles and permission groups in the Role-Based Permission framework.

• Administrator

  An administrator is a user who has access to the Admin Center page in SAP SuccessFactors.

When the Super Administrator logs in for the first time, only one link on the Administrator Permissions page is visible. This is Manage RBP Admin and Super Admin Access. Choose the link to assign an employee the permission to function as a Security Administrator.

To access the features Manage Permission Groups, Manage Permission Roles, andRBP Troubleshooting, users must at least be granted the permissions View Group and View Role from the tool Manage RBP Admin and Super Admin Access available from theAction Search. If they also should be able to changePermission Groups and Permission Roles, users must be granted the permissions Edit Group and Edit Role from the feature Manage RBP Admin and Super Admin Access available from the Action Search.

You can also use the Manage RBP Admin and Super Admin Access admin tool to manage both Role-Based Permissions (RBP) admins and super admins directly in the system. You can add, modify, or remove super admin access as needed.

When selecting Add User and granting the permission, the new user will be in the list with the permissions "Edit Group" and "Edit Role" box checked.

If you select the check box for Allow Access to This Page, then the users will be able to add or remove other users from the group with access to the feature. As a security precaution, the recommendation is to have at least two users with access to this page.

The Super admin is not able to uncheck their own access to the page (since it will forbid them to view this page, thus not able to grant the access back). The checkbox needs to be always checked and not able to change (marked in gray).

For permission role changes that impact a large number of access users, you can enable double-confirmation popups and e-mail notifications for administrators. You can also set a threshold for triggering these notifications. For example, you can set the threshold to 80%, and notifications will be triggered if 80% or more employees are impacted by a permission role change.

You can manage RBP administrator access under Admin Center Manage RBP Admin and Super Admin Access. Existing RBP administrators have both the Role-Based Permission Admin (View) and the Role-Based Permission Admin (Edit) access by default. You can review and update their access accordingly.

Some RBP administrators only need view access but not edit access.