1. Context for Accessing IT Resources Lars Kruger and Bastian Grabski Objective: Context based approach that provides individual access to IT resources in heterogeneous system landscapes. Kosala Yapa Bandara

2. 2 Content 1.Personalized Access 2.Individual Access 3.Definition of user context 4.Information model for user context – UML context model to Authorization concepts of SAP R/3. 5.Conclusion

3. 3 Manual access grants in applications or role orientation. 1. Personalized Access E.g. An employee is assigned with business roles, which are mapped with technical roles for resources allocation and the resources allocation is done manually by the system administrator.

4. 4 Goes beyond personalization and it includes the user as an individual with his/her specific requirements. 2. Individual Access

5. 5 Individualization Personalization  is based on conventional role concepts  acquisition of user‘s information demand with formal organizational roles and whose synchronization with technical role concepts  Objective Extra role behavior  is based on functional role concepts  acquisition of user‘s information demand with extended role concepts: functional roles and specification of additionally needed IT resources ( that contradicts to conventional role concepts).  subjective  time-dependent  situation orientation = context awareness Personalization and Individualization

6. 6 3. User Context Represent user’s information demand by using role concepts from the business and the individual perspective. Objective information demand –Business role ( Technical / IT role)‏ Carried out in his/her position Subjective information demand –Functional role Request for IT resources which extend the user’s job description.

7. 7 User Context … User context represents objectively as well as subjectively required IT resources for all tasks that arise from a user’s specific situation and is expressed by business and functional roles.

8. 8 User context and IT roles Mapping user context to technical roles Enable context aware and automatic granting of access privileges. User Context …

9. 9 4. Information Model SAP R/3 System

10. 10 Information Model …

11. 11 5. Conclusion Context awareness includes the adaptation of the user context model to changing situations and information demand Ongoing Work: Automatic provisioning of IT resources with supported DSL.

12. 12 Thank You !