about your learning experience to help us improve.

You've completed

cleanFiles/bookmap_Configuring_SAP_CIAM_for_B2B_en-US_learning-sap-com_lsc-prod.zip (MMCP-DROPZONE) - 2024-12-05T11:57:17.000Z

Organization Availability and Automated Assignments

<div id="content">I​n this lesson, we will explore how to define automated assignments using access control policies in SAP Customer Data Cloud. Understanding automated assignments will help you streamline the process of managing members’ access to organization resources.<dl><dt>Availability</dt><dd>Defining availability helps set the scope of your policies, indicating which organizations can access them.<ul style="list-style-type:disc"><li tabindex="0">Specify which Organizations can assign the Policy to their members in the Delegated Admin console</li><li tabindex="0">Ensure only the intended members can access the organization resources</li><li tabindex="0">Availability Rules determine to which Organizations the Policy will be available</li></ul></dd><dt>Automated Assignments</dt><dd>Defining the Organization Members to which this Policy automatically assigned based on specific criteria.When enabled, an additional section appears for setting Automatic Rules:<ul style="list-style-type:disc"><li tabindex="0">Select Attributes: Choose Organization or Member attributes such as Department, Role, etc.</li><li tabindex="0">Specify Values: Define the attribute values that will trigger automatic policy assignment</li></ul><img style="max-width:900px;max-height:none" class="image 1_1_landscape" title="Screenshot showing how to define automated assignments by setting automatic rules based on the organization or member attributes and the And / OR logical operations between the rules." alt="Screenshot showing how to define automated assignments by setting automatic rules based on the organization or member attributes and the And / OR logical operations between the rules." src="/service/media/C4H622I_2408_en-US_media/C4H622I_2408_en-US_images/U5_L3 Diagram 1.png" tabindex="0">​Automated Assignments ensure that policies are consistently applied across the organization without requiring manual intervention. This not only saves time but also maintains security by ensuring that only the right members have access to critical resources at any given time.</dd></dl></div>

Defining Automated Assignments

<div id="content">​In the following video, we’ll walk you through the process of defining the scope of a policy, and how they can be automatically applied across the organization using Automated Assignments.<div class="kalturaVideoLessonWrapper"><div aria-label="" class="kalturaVideoLessonContainer" data-testid="video" id="1_l7lces7n"></div></div></div>

Configuring Automated Assignments

From Onboarding to Governance: Mastering SAP Customer Data Cloud for B2B

U5L4 Organization Availability and Automated Assignments.mp4

As you’ve done before in this class, access the Customer Identity & Access Management (CIAM) B2B features by selecting Organization Management in the SAP Customer Data Cloud Console at the top left of the window. Once there, choose the desired partner from the Partner/Site Switcher dropdown menu, located in the top-right corner of the screen. Then select a site or site group where you previously enabled Organization Management. The next screen shows the CIAM for B2B Organization Management Console. First, we would like to define the scope of the policies, indicating which organizations can access them. Within the Policy Catalog, choose one of the Policies and click on it. In this example, let’s pick “Commercial Account Manager”. We now see the details of this policy. Choose Availability in the left menu and click on Edit at the top right. Here, you’re able to define which Organizations can assign the selected policy to their members in the Delegated Admin Console. It’s possible to make the policy available to None of the organizations, All Organizations, or Selected Organizations. We continue by choosing “Selected Organizations”. This allows us to set up availability rules, which are conditions based on Organization Attributes' values that determine whether the policy should be available or not. Rules can be configured using And- or OR-Conditions. In this case, we set up a rule based on the Organization Attribute Country. In our example, the rule will be activated when the value is “Germany”. It’s also possible to select specific organizations using checkboxes at the bottom. Complete the configuration by clicking on Save at the bottom right. Let’s proceed with Automated Assignments. Automated Assignments ensure that policies are consistently applied across the organization without requiring manual intervention. This not only saves time, but also maintains security by ensuring that only appropriate members have access to critical resources at any given time. To configure this, select Automated Assignments in the menu on the left. Next, click on Edit at the top right. If you want to automatically assign this policy to organization members, you can activate Automatic Rules by selecting Yes. Next, it’s possible to define rules based on organization or on member attributes like department, role, etc. Let’s set up the rule so that this policy is automatically assigned to organization members who work in the sales department and have the consultant role. Click on Save to complete the configuration. Congratulations! You've successfully learned how to use access control policies and set up the availability and automated assignments of policies for organizations and their members.