Context for Accessing IT Resources

Lars Kruger and Bastian Grabski

Objective:Context based approach that provides individual access to IT

resources in heterogeneous system landscapes.

Kosala Yapa Bandara

2

Content

1. Personalized Access

2. Individual Access

3. Definition of user context

4. Information model for user context– UML context model to Authorization

concepts of SAP R/3.

5. Conclusion

3

• Manual access grants in applications or role orientation.

1. Personalized Access

E.g. An employee is assigned with business roles, which are mapped with technical roles for resources allocation and the resources allocation is done manually by the system administrator.

4

• Goes beyond personalization and it includes the user as an individual with his/her specific requirements.

2. Individual Access

5

Individualization

Personalization is based on conventional role

concepts acquisition of user‘s information

demand with formal organizational roles and whose synchronization with technical role concepts

Objective

Extra role behavior is based on functional role

concepts acquisition of user‘s information

demand with extended role concepts: functional roles and specification of additionally needed IT resources ( that contradicts to conventional role concepts).

subjective time-dependent situation orientation = context

awareness

Personalization and Individualization

6

3. User Context

• Represent user’s information demand by using role concepts from the business and the individual perspective.

• Objective information demand– Business role ( Technical / IT role)

Carried out in his/her position

• Subjective information demand– Functional role

Request for IT resources which extend the user’s job description.

7

User Context …

• User context represents objectively as well as subjectively required IT resources for all tasks that arise from a user’s specific situation and is expressed by business and functional roles.

8

User context and IT roles

• Mapping user context to technical roles

Enable context aware and automatic granting of access privileges.

User Context …

9

4. Information Model

SAP R/3 System

10

Information Model …

11

5. Conclusion

Context awareness includes the adaptation of the user context model to changing situations and information demand

Ongoing Work: Automatic provisioning of IT resources with supported

DSL.

12

Thank You !