Getting Started with Administration

SAP SuccessFactors offers different levels of administration to manage the amount of control each user has in the system. There are three basic levels of system administration:

• Super Administrator

  The Super Administrator is created initially in Provisioning. This administrator grants permission to others so that they can become a Super Administrator or Security Administrator.

• Security Administrator

  The Security Administrator is responsible for managing all security through roles and permission groups in the Role-Based Permission framework.

• Administrator

  An administrator is a user who has access to the Admin Center page in SAP SuccessFactors, granted by the Security Admin, that granted administrative permissions to this user.

When the Super Administrator logs in for the first time, only one link on theAdmin Center page is visible. This is Manage Super Admin Access. Choose this tool to assign an employee the permission to function as a Security Administrator.

The page displays a list of Super Administrators in two categories based on their permission levels:

• Super admins: a broad-scope administrative role with permission to access the tool Manage Super Admin Access, Manage RBP Admin Access, User Search, and Manage Provisioning Access
• Admin overseers: a high-privilege oversight role with permission to access the tool Manage Super Admin Access, Manage RBP Admin Access, and User Search.

You can add, modify, or remove super admin access as needed in this tool. The system prevents deleting yourself as a super admin. We recommend revoking super admin permissions when an employee terminates their employment or leaves the company. You can access audit logs for super admin and admin overseer data through the Viewer for SAP Audit Log service and Audit Log Search API.

Use the Manage RBP Admin Access tool to:

• Add, update, and remove RBP admins.
• Grant View Role, View Group, Edit Role, Edit Group, and Notify this user of RBP Changes access to the RBP admins.
• Configure notification settings for RBP admins using the RBP Notification Settings capability.

To access the tools Manage Permission Groups, Manage Permission Roles, and RBP Troubleshooting, users must at least be granted the permissions View Group and View Role from the tool Manage RBP Admin Access. If they also should be able to change Permission Groups and Permission Roles, users must be granted the permissions Edit Group and Edit Role from the feature Manage RBP Admin Access.

For permission role changes that impact many access users, you can enable double-confirmation popups and e-mail notifications for administrators. You can also set a threshold for triggering these notifications. For example, you can set the threshold to 80%, and notifications will be triggered if 80% or more employees are impacted by a permission role change.