Role Provision from AD groups to S/4 HANA STE

[former_member675302]

Hi,

we want to create users with their roles in S/4HANA Single Tenant Edition. We want to have a MS Active Directory to be the single place where to create and maintain users.

I saw there is SAP Cloud Platform Identity Provisioning Service. For me it seems that it can provision users from on Prem AD via Cloud Connector to S/4 HANA STE but is it right, that it can't create a role to this user? I did not find how to do it in the Help

https://help.sap.com/viewer/f48e822d6d484fa5ade7dda78b64d9f5/Cloud/en-US/2d2685d469a54a56b886105a06c...

Has anyone an idea if creating roles is possible with Identity Provisioning or is there another possibility to do this so that we can use the AD as single source of truth?

We already have an IAS for the SAP Cloud Platform if that helps.