This guide will detail steps on what needs to be set up in SAP in order for Beamery to be able to push the role-skills mappings integration to the SAP Job Profile Builder.

Create the API User

Create an API user, as explained in this guide. However, please note that in the guide, there are a number of permissions added to the new permissions group which are not necessarily needed. Please see the steps below to ensure only the necessary permissions are granted.

Create Permission Group/Role and Assignment of User

In SAP we can add a user to a ‘permission group’. You can also assign ’permission roles’ to a ‘permission group’. This enables you to configure minimal permissions required for integration on a user group level. Please see the below action steps that are needed:

a. Create permission group

b. Create permission role with only specific permissions

c. Assign permission role to permission group

d. Assign the API user to permission group

Permissions List

You need to get the following permissions granted to the user permission group (which contains the integration user) in order for the API user to make successful API invocations to process JPB data:

First, perform the following:

Search Configure Object Definitions > Select Object Definition in the drop down and select Job Profile in the drop down next to it on the right. 

Then select Take Action dropdown value as: Make correction >  Under Security: change Secured to Yes > Permission Category: change to Manage Job & Skill Profile Visibility > Click Save.

Navigate to Manage Permission Roles and pick the role tied to your group. Then click edit and next (to go to the Add Permissions section). Then enabled these permissions:

Metadata Framework

  * Access to non-secured objects

  * Admin access to MDF OData API

Manage Job Profile Builder

  * Manage Job Profile Content (View)

Manage Job & Skill Profile Visibility

  * Job Profile (View)

The following is an example of one the new Permission Roles and the new Permission Groups we need to create and add the new API user to them:

Set up OAuth2 Application

• Navigate to ‘Manage OAuth2 Client Applications’

• Click ‘Register Client Application’

• Set the ‘Application Name’ and ‘Application URL’
  • Application Name: Name of your choice - We recommend making it clear which integration this is for i.e. 'Beamery TIH Integration'

•  
  • Application URL:
    • https://beamery.com/push

• Open the x509 certificate provided by the Integration Consultant from Beamery, and copy the contents of it (exclude --BEGIN CERTIFICATE-- and --END CERTIFICATE--) to the ‘X.509 Certificate’ section

• Once registered, click on ‘View’ for the application you just created and find the API Key

• Provide the API Key from the step above to your Integration Consultant at Beamery.