SAP Knowledge Base Article - Public

3164365 - IAG Scheduled Job Frequency recommendation


How frequently should we schedule the following IAG Jobs in Job Scheduler

Access Analysis
Repository Sync
SCI User Group Sync Job


SAP Cloud Identity Access Governance 2.0, IAG


You can schedule the job anytime but our recommendations are,

Repository Sync - This is the first job you have to run to bring the user/privilege data before running the access analysis job. This is full or increment based on system types. We would recommend to run this job based on how frequently you change in each connected system. For ex, if you update the SAC once a day or rarely, then you an schedule a job daily. If you see any frequent updates, then you can run every few hours.

Access Analysis - Once the repository sync is completed, then you can run the access analysis job. This job runs for all objects from all connected systems and hence it may take more time based on number of object changes or rule changes. This is only incremental job. It is recommended to run during non-business hours or if there are frequent changes, then few hours. 

SCI User Group Sync Job - This job gets all the user and group mappings from IAS for actions to be performed in IAG. This is mostly one time activity if you have IAS system connected for provisioning.  If you are not using IAS for provisioning, then you may have to schedule based on your need or daily.


KBA , GRC-IAG , SAP Cloud Identity Access Governance , How To


SAP S/4HANA Cloud 2202