Fiori tile - User specific security within a role

[former_member77134]

Within the business, say we have a role setup: Retail for example and we have 300 users that have the Retail role which allow access to the Orders group (which contains 5 apps in total).

If we wanted only a handful of these users to have access to all 5 apps and the other 99% of the users to only have access to say 3 of the 5 apps is there a way to do this without creating a assigning to a different group.

Can authority / visibility be set for specific users that have access to a group?

[former_member318179]

Hi Scott,

Particular set of Apps can be made visible to particular set of user's.

1. Create Catalog containing all the 5 tiles.

2. Create 2 Groups(2 combination of Tile's as required by user's) referencing the catalog created in step 1.

3. Create 2 PFCG role , each role containing Tile Catalog(from step 1),Tile Group(from step 2 as per the combination created).

4. Assign PFCG role(from step 3) as per user tile combination required.

Regards,

Rehan Sayed

[saurabh_vakil]

But by doing it this way, won't all users (having role1 and role2) be able to see all the 5 app tiles if they navigate to App Finder?

[former_member318179]

Hi Saurabh,

Yes,you are right.

In that case 2 catalogs(One having 3 App and Second having 5 Apps) has to be created with respective group's and PFCG Role's.

Regards,

Rehan Sayed

[saurabh_vakil]

This is precisely what would be required...2 different catalogs with the number of app tiles and 2 groups mapped to the 2 catalogs.

[former_member77134]

Sorry mix of words.

I thought this was the case. The reason I was asked to look into this was because we are having a period of change freeze (time with no transports allowed) and we need an app out on a certain date and was asked to see if this could be managed by the basis or security team with roles or anyother way not involving a transport. But as I suspect any Fiori changes to the LP will require a customising transport.

Thanks

[kammaje_cis]

'Group' does not actually control the authority, Catalogs do it.

Groups just control which apps appear by default in the launchpad.

In your scenario you have to have at least two Catalogs and preferably two Groups.