Enabling Only the Necessary Expense (Coupa) Integration Task Permissions

[#1]

Introduction

The Expense (Coupa) direct integration with SaaS Management includes two integration tasks: Application Roster and Expense Discovery. For a description of these integration tasks, see SaaS Integration Task  Terminology. You can now provide only the permissions necessary for the specific tasks you wish to enable for the Expense (Coupa) integration. 

Feature Use Cases

The following use cases describe how to enable only the necessary permissions for an existing SaaS Management integration with Expense (Coupa) and when adding a new integration with Expense (Coupa). For example, you may only wish to enable the Application Roster integration task using the permissions described in the Required Minimum Permissions for Expense (Coupa) section of the Expense (Coupa) integration instructions. 

Use Case 1: Enabling the Least Privileges for an Existing Expense (Coupa) Integration

If you have already set up the direct Expense (Coupa) integration in SaaS Management and wish to remove certain permissions, complete the following steps. If you later wish to enable another integration task, you first need to update the permissions in Coupa before enabling the integration task in SaaS Management. For more information on these permissions, see the Required Application Permissions for Expense (Coupa) section of the Expense (Coupa) integration instructions. 

IMPORTANT: If you enable only specific permissions in Coupa, but you enable all Expense (Coupa) integration tasks in SaaS Management, the tasks lacking the necessary permissions will fail in SaaS Management.

To enable the necessary Expense (Coupa) permissions:

1.  In Coupa, sign in as an Integration Admin and choose only the relevant permissions according to the tasks you plan to set up in SaaS Management. 
2. In SaaS Management, go to the Expense (Coupa) Integration tab (SaaS > Managed SaaS Applications > Integration).
3.  In the Integration Task table, go to the Actions column.
4.  Ensure the appropriate integration task that you wish to disable displays as Disabled. You do not need to reauthorize the Expense (Coupa) integration in SaaS Management.

Use Case 2: Enabling the Least Privileges for a New Expense (Coupa) Integration

If you are setting up a new direct Expense (Coupa) integration in SaaS Management,  choose only the relevant permissions in Coupa for the integration tasks you plan to set up in SaaS Management. If you later wish to enable another integration task, you first need to update the permissions in Coupa before enabling the integration task in SaaS Management. For more information on these permissions, see the Required Application Permissions for Expense (Coupa) section of the Expense (Coupa) integration instructions. 

IMPORTANT: If you enable only specific permissions in Coupa, but you enable all Expense (Coupa) integration tasks in SaaS Management, the tasks lacking the necessary permissions will fail in SaaS Management.

To enable the necessary Expense (Coupa) permissions:

1.  In Coupa, sign in as an Integration Admin and choose only the relevant permissions according to the tasks you plan to set up in SaaS Management. 
2. In SaaS Management, go to the Expense (Coupa) Integration tab (SaaS > Managed SaaS Applications > Integration).
3.  In the Integration Task table, go to the Actions column.
4.  Ensure the appropriate integration task that you wish to disable displays as Disabled.