Local rules
Access through: Rules > Definitions > Local rules
Local rules is part of the rules feature in Snow Optimizer for SAP® Software. As a building block for rule sets, you can create, change, and copy local rules.
Description
Local rules are rules that apply to a single system. They focus on a single user or an aggregation group and consist of defined conditions and actions. If a condition applies to data, an action is taken. With an AND operator, you can combine many conditions within a local rule, so all conditions have to be met before any action is taken. You can perform an OR operation by selecting many condition values within a condition of a local rule, or by creating several local rules.
Before you can use a local rule in a rule set, you must activate the local rule. Upon activation, the local rule is checked for errors, saved, and marked as ready to use.
As a starting point, you can find templates of local rules in Snow Optimizer for SAP® Software.
Examples for local rules
Below are three examples of how you can create different types of local rules.
Local rule with a single condition and a single action
Purpose of this local rule: Assign the license type ESS to users who only use transactions that are included in an ESS usage profile.
Create a condition that checks for users who only have used transactions from an ESS usage profile.
-
Select the condition type Matching CPU time usage profile % >= Threshold.
-
Select the ESS usage profile.
Enter condition value for Matching % >= : 100.
The condition is met if there are users who have used 100 % of their CPU time for transactions that are included in the ESS usage profile.
-
Create an action that considers 100 % used CPU time of the ESS usage profile and make sure that the license type ESS is assigned to those users.
-
Select the Set license type action type.
-
Enter the action value for Set license type: 56
-
Local rule with a single condition and many actions
Purpose of this local rule: Users who have not logged in for at least 30 days will be locked and assigned a test user license.
Create a condition that checks for users who have not logged in for at least 30 days.
-
Select the Last logon user condition type.
-
Enter the condition value for Days since last logon: 30.
The condition is met if users exist who have not logged in for at least 30 days.
-
Create actions that consider existing users who have not logged in for at least 30 days and make sure they cannot log in anymore and they have a test license assigned.
-
Action 1: Select the Lock user action type.
-
Action 2: Select the Deactivate user action type.
-
Action 3: Select the Set license type action type.
-
Enter action value for Set license type: 91.
-
Local rule with many conditions and a single action
Purpose of this local rule: Create a user group for users who are assigned only selected roles.
Create conditions that check for users who only are assigned selected roles.
-
Condition 1: Select the ABAP role assignment condition type.
-
Enter condition value for roles: Role 1 and Role 2.
-
-
Condition 2: Select the ABAP role assignment condition type.
-
Enter condition value for roles: *.
Exclude values: Role 1 and Role 2.
Select the True if none of the roles assigned checkbox.
The conditions are met if users exist who are only assigned Role 1 and Role 2, but no others.
-
Create an action that considers users who are only assigned Role 1 and Role 2, but no others.
-
Select the Set user group action type.
- Enter action value for User group: XYZ.