Preparing your Instance and Assigning Role-Based Permissions (RBPs)

Objective

After completing this lesson, you will be able to verify your instance initial Provisioning and basic Role-Based Permissions set up

Provisioning Settings and Role-Based Permissions

An Instance is the front end, or customer facing view of the SAP SuccessFactors system. Provisioning is the back end of the Instance and it is used to turn on modules and features, work with templates and create administrator accounts. The SAP SuccessFactors Performance and Goals bundle needs to be turned on in Provisioning to become available in the Instance.

Caution

Customers don't have access to Provisioning. This is only relevant for SAP Consultants that are involved on the product implementation.

The Role-Based Permissions framework is used to configure the permissions by roles. Once the SAP SuccessFactors Performance and Goals bundle is enabled, the appropriate permissions need to be granted

Verify initial settings in your Instance

Your training instance will include already the basic set up and the necessary permissions for the administrator role, as well as the generic roles for all managers, all employees and the employee search role, which allows users to navigate the org chart or search for any users within the company. In the following exercises, you will make some verifications to ensure your system is ready for the configuration of the SAP SuccessFactors Performance and Goals modules.

Note

The concepts and tools to set up Role-Based Permissions are part of the prerequisite learning journey Exploring SAP SuccessFactors Platform.

You can also check on the SAP Help Portal the following documentation for a refresh on RBP concepts, configuration and usage: Implementing Role-Based Permissions and Using Role-Based Permissions.

Verify your instance configuration in Provisioning

Business Example

In the initial stages of an implementation you must make some verifications on the initial setup configured in Provisioning.

If you are taking this course as part of an instructor-led delivery, you should have received an email with a link to the instance and Provisioning, and the login credentials for the administrator to both systems. If you have not received this information in an email, please reach out to your instructor.

What is my login information for Provisioning and the instance?.

Self-learning (SAP Learning / Hands-on Practice System): If you have enrolled to an SAP SuccessFactors Hands-on Practice System, you can start using it once the system is active (typically within 90 minutes after enrollment). Access is valid for 21 days.

  • Use the Access button and navigate to BizX Provisioning to access the back end configuration and review the settings as part of this exercise.

  • For additional information, you can check the Set up guide available when accessing your hands-on practice system or review the FAQ here: Practice systems support.

Virtual instructor-led courses: If you are in an instructor-led course, you should receive your instance prior to the beginning of the course.

  • You must attend daily meetings for the duration of the course.

  • If you have not received an instance by the first day of the course, ask your instructor.

Learn how to access the Company Settings in Provisioning to verify some of the Performance and Goals options.

Steps

  1. Navigate to the back end (Provisioning) to Edit Company Settings.

    1. Log in to Provisioning.

    2. In the Company Name column, select the company ID of your organization.

    3. Under Edit Company Settings section, select Company Settings to start changes.

  2. Verify the following company settings are enabled:

    Hint

    Using CTRL+F is very helpful.

    Note

    Several of the options you verify in this exercise are explained in more detail later in the course.

    Example

    • Performance Management

    • Writing Assistant

    • Workflow

    • 360 Reviews - SAP Fiori Version - requires "360 Multi-Rater"

      • Enable 360 Executive Review Page - requires 360 Multi-Rater and Role Based Permission

    • Graphical Report (360) - requires "360 Multi-Rater"

    • Legal Scan

    • Live Profile

    • Language Packs: Please do not use Tagalog or English SAP SLS! They do not have any translations in place or are being used solely for internal testing purposes. Use nb_NO for Norwegian and sv_SE for Swedish. After the release of b1408, there should be no IDs with _SF (third column). See SuccessFactors internal wiki for the latest information on languages.

      • Deutsch (German)

      • English US (English US)

      • Nederlands (Dutch)

    • Manage Users

    • JDM v2.0/Skills Management - requires "Role-based Permission (This will disable Administrative Domains)", "Enable Generic Objects" and "Enable the Attachment Manager"

    • Enable Manage Languages tool

    • Rich text editor for PM and 360

      Note

      The Stack Ranker is also known as Team Rater, and the "Stack Ranker" switches below might be called Stack Ranker or Team Rater in your instance. You will learn how to change it in a later Unit of this course.
    • Stack Ranker for Performance Management

    • Stack Ranker for 360

    • Enable the Attachment Manager

    • Stack Ranker for Performance Management — Enable display of all forms but self

    • Enable Calibration (requires Role-Based Permission)

    • Enable Business Configuration in Admin Tools - requires "Enable Generic Objects" and "Enable the Attachment Manager"

    • Enable Generic Objects — requires "Enable the Attachment Manager"

    • Enable Performance Management Access Permission

    • Enable Team Overview Access Permission — requires "Role-based Permission (this will disable Administrative Domains)"

    • Enable Goal Management Access Permission

    • Disable Form Status Page

    • Enable Continuous Performance Management - requires "Enabled Generic Objects", "Role-based Permission (this will disable Administrative Domains)" and "Enable the Attachment Manager"

    Verify the following company settings within the Goal Frameworks area, are enabled:

    Example

    • Goal Management Suite: Total Goal Management

    • TGM/CDP Goal Transfer Wizard

    • My Goals Tab — requires Total Goal Management

    • Goal Import

    • Enable the Goal Management-Performance Management Sync up

    Verify the following check boxes within the Analytics and Dashboards Tabs & Misc Reporting are enabled:

    Example

    • Gap Analysis

    • Ad Hoc Report Builder

      • Performance Management
      • 360 Multi-Rater Subject

    Verify these additional company settings are enabled:

    Example

    • Enable Proxy Feature

    • Enable Use of External Users (V10 & V11 only).

    • Enable Collapsible Route Map.

    • Enable full form Legal Scan.

Verify Permission Roles

Business Example

Following on from the previous exercise, you must now verify and test the permission roles for Administrators, Managers, All Employees, and Employee Search, already configured in your instance, and test these permissions.

Learn how to verify the Performance and Goals Administrator role.

Hint

You can use the option Sort by Ascending to display the permission categories in alphabetical order.

Steps

  1. Verify that the required permissions are in place for all the permission roles.

    1. Navigate to Manage Permission Roles using Action Search.

    2. Locate the Administrators role, and select the Edit option from the Actions column.

    3. Select Next to navigate to step 2. Add Permissions.

    4. Select the Sort by Ascending checkbox.

    5. Verify the following user and administrator permissions are enabled using the tables provided.

    6. If you have to enable any permission, when finished, select Next to navigate to step 3. Preview and then, select Save to save your changes.

    7. If there are no changes, you can select the Manage Permission Roles option available at the top of the page to navigate back to the main menu and select a different role.

    8. Repeat these steps to verify permissions granted to the following roles: Managers, All Employees and Employee Search.

    Administrators - User Permissions

    User PermissionsPermissions Assigned

    AI Access

    All
    CalibrationAll
    Continuous Performance ManagementAll
    Continuous Performance Management User PermissionAll
    Dynamic TeamsAll
    Employee DataEdit all standard and background elements
    Employee ViewsAll
    General User PermissionAll, except Hide 'All active/inactive employees' option in Launch Forms wizard.
    GoalsAll
    Growth PortfolioAll, except Team View.
    Objectives and Key ResultsAll
    PerformanceAll, except Restrict Data Access of Inactive Users' Forms
    Reports PermissionAll

    Administrators - Administrator Permissions

    Administrator PermissionsPermissions Assigned
    Admin Center PermissionsAll
    Check ToolAll
    Configure Dynamic TeamsAll
    Configure Objectives and Key ResultsAll
    Configuration Transport CenterAll
    Manage Action SearchAll
    Manage AI CapabilitiesAll
    Manage Business ConfigurationAll
    Manage CalibrationAll
    Manage Competencies and SkillsAll
    Manage Dashboards / ReportsAll
    Manage DelegationAll
    Manage DocumentsAll
    Manage Form TemplatesAll
    Manage DelegationAll
    Manage GoalsAll
    Manage HiresInclude Inactive Employees in the search
    Manage Integration ToolsAll
    Manage Job & Skill Profile VisibilityAll
    Manage System PropertiesAll
    Manage SuccessionAll
    Manage Talent CardAll
    Manage Talent Intelligence Hub SettingsAll
    Manage UserAll, except Hide the Option to Import by Overwriting Existing Data for Background Information

    Learn how to verify permission role configuration for all the managers in the organization.

    Managers - User Permissions

    User PermissionsPermissions Assigned
    Calibration
    • Detailed Calibration Permissions
    • View Calibration Tab
    • View Calibration History
    GoalsAll permissions, except Admin Access for Goal ODATA API Export
    Performance
    • Performance Management Access
    • Restrict Data Access of Inactive Users' Forms
    • Team Overview Access
    • View Overall Ratings from Forms
      • View Goal Ratings from Forms
    Employee ViewsView for all sections.
    Reports PermissionSelect All
    Employee DataView for all fields, including the Employee Profile and the Background sections (you need to scroll down to find it.)
    General User PermissionSelect All
    Dynamic TeamsAll
    Growth PortfolioView for all permissions, and the following permissions for Growth Portfolio:
    • View
    • Create
    • Delete
    • Edit Proficiency Level

    Note

    Team View is granted to all managers on a different permission called TIH - Team View since the target population is different from the manager's role.
    AI Access
    • Assisted 360 Reviews Insights
    • Assisted 360 Reviews - Sentiment Analysis
    • Assisted Performance Insights

    All Employees - User Permissions

    User PermissionsPermissions Assigned
    Goals
    • Goal Management Access
    • Goal Plan Permissions. Select All radio button.
    Performance
    • Performance Management Access
    • Restrict Data Access of Inactive Users' Forms
    Employee ViewsView for all sections.
    Employee DataEdit for all fields, including the Employee Profile and the Background sections (you need to scroll down to find it.)
    General User Permission
    • User Login
    • Live Profile Access
    • Mobile Access
    Growth PortfolioView for all permissions, and the following permissions for Growth Portfolio:
    • View
    • Create
    • Delete
    • Mark as passionate
    AI Access
    • Assisted Performance Goals
    • Assisted Writing with Text Analyzer
    • Assisted Skill Recommendations Using Continuous Performance Management Data

    Learn how to verify the permission role for employee search purposes and test the permissions.

    Employee Search - User Permissions

    User PermissionsPermissions Assigned
    Employee ViewsProfile
    Employee DataView for these fields:
    • First Name
    • Last Name
    • Manager
    • Middle Name
    • Title
    General User Permission
    • Organization Chart Navigation Permission
    • Company Info Access
    • User Search
  2. Test the permissions using Proxy Now to proxy as an employee, manager and administrator:

    1. In the Name Menu, select the option Proxy Now to proxy as another user.
    2. Enter Brooke Brown as the target user and click OK.
    3. In the Home Page, click on Profile card under Quick Actions to navigate to the Employee File.
    4. Locate the Personal Information block. You should be able to see this icon and be able to edit fields like Middle Name or Title.
    5. From the Name Menu, select the option Proxy Now to proxy as another user.
    6. Enter Alex Anderson as the target user and click OK.
      • From the main menu, navigate to Performance , and verify that you can see the Team Overview tab. This option should be displayed at the top section, but do not need to access yet. We just want to confirm the option is visible at this stage, only for Managers but not for Employees.

      • From the main menu, navigate to Employee Files .Search for Brooke Brown within your direct reports. Notice that the Personal Information block is not editable.

    7. From the Name menu, select Become Self to become HR Coordinator.

      Verify that you can access Goal Management Feature Settings, by typing feature in the Action Search.

    Summary

    • An Instance is the front end, or customer facing view of the SAP SuccessFactors system.
    • Provisioning is the back end of the Instance and it is used to turn on modules and features, work with templates and create administrator accounts.
    • The SAP SuccessFactors Performance & Goals bundle needs to be turned on in Provisioning to become available in the Instance.

Log in to track your progress & complete quizzes