Default role, Azure AD and automatic role assignment

[Former Member]

Hi everyone,

we are currently rolling out SAP S/4Hana Cloud and as one of the responsible IT guys for authentication i have a question.
The IT should be responsible for building the business roles and assign the roles afterwards.

Let's say there are 10 business roles. One role should be assigned always (e.g. time recording).

How can i achieve that every user that is created @ SAP (through HR System integration) gets this basic business role?
And can i assign the other business roles by using Azure AD groups somehow?

Best regards

Stephan

[Amith_Nair · Accepted solution]

Hi stephang

Check out this blog: https://blogs.sap.com/2018/08/08/how-to-import-employee-master-data-to-s4hana-cloud-part-i/

As you know Azure AD is your corporate portal and you should have the same set of users what you have in Azure to reflect in S4 for the single SIgn on to work, but the roles in Azure is different from roles that you assign to you users in S4HANA Cloud. So i don't think that is something you want to spend time on.

hope the blog helps better.

Thanks!

Amith Nair