we are currently rolling out SAP S/4Hana Cloud and as one of the responsible IT guys for authentication i have a question.
The IT should be responsible for building the business roles and assign the roles afterwards.
Let's say there are 10 business roles. One role should be assigned always (e.g. time recording).
How can i achieve that every user that is created @ SAP (through HR System integration) gets this basic business role?
And can i assign the other business roles by using Azure AD groups somehow?