Fiori security at Tile Level

[Former Member]

Need inputs from Fiori Security experts.

We developed many custom app's and created required group level security roles. Now our customers are looking for Tile level security.

For example We created a Group called Approvals and tiles in this group are "Approve PR's", "Approve PO's", "Approve SES",

"Approve Contracts". Now if User-A logins he should see only "Approve PR's", "Approve Contracts" and if Use-B logins in he should see "Approve PR's", "Approve PO's", "Approve SES" and if User-C logins in he should see "Approve SES", "Approve Contracts".

Approval Group App's --> Approve PR's, Approve PO's, Approve SES, Approve Contracts

User-A "Approve PR's", "Approve Contracts"

User-B "Approve PR's", "Approve PO's", "Approve SES"

User-C "Approve SES", "Approve Contracts"

Thanks,

Venu.

[kammaje_cis]

I would suggest below settings.

Step 1. Create one catalog containing all the approval apps. This will be the reference catalog for all the subsequent catalogs. This catalog will not be assigned to any roles.

Step 2. Create another Catalog containing only "Approve PR's", "Approve Contracts". Do not create fresh tiles here. Rather create a reference/copy from the reference catalog created in Step 1. Create a Group for these tiles and assign both of them to a role.

Step 3. Repeat Step 2 for each of the variations of access.

Advantage of creating one reference catalog is that you need not define target mapping and tile settings repeatedly for each catalog. If there is a change, you just have to change in one place.

[former_member318179]

Hi Vellanki,

1. Create Catalog containing all the tiles.

2. Create 3 Groups(3 combination of Tile's as required by user's) referencing the catalog created in step 1.

3. Create 3 PFCG role , each role containing Tile Catalog(from step 1),Tile Group(from step 2 as per the combination created).

4. Assign PFCG role(from step 3) as per user tile combination required.

Regards,

Rehan Sayed