Standard roles to provide access to Fiori applications and SAP Screen personas flavors

[Ritz]

Hello Experts,

Appreciate if someone could suggest even after assigning SAP_ALL as well as SAP_NEW , user is unable to access Fiori applications as well as SAP Screen personas flavors.

Do you know which standard roles covers Fiori and SAP personas related access?

Thanks

RD

[saurabh_vakil]

Which are the Fiori apps that you expect to see on the launchpad? Are these standard Fiori apps or custom developed apps?

If these are standard Fiori apps, then you will need to check the implementation information section for the respective app(s) in the Fiori Apps Library and assign the mentioned business roles to the user to be able to view the apps on the launchpad.

[former_member195355]

Hi Ritesh,

For SAP standard Fiori apps, you will need to go to the Fiori Apps library, find your app and check the implementation information-->Configuration section to see which business roles are needed:

For Personas, you can use the following roles:
Administrator: /personas/admin_role - full rights
Editor: /personas/editor_role - full access to the client but not the Administrative transactions
Consumer: /personas/consumer_role - for user access to SAP Screen Personas Flavors

Hope this helps.

[Ritz]

robert.montage,

Thanks for reply. Let me add more on my requirement. We need to maintain roles for OSS id which SAP will be using when ever we open ticket. With recent few incident my experience is OSS id have SAP_ALL as well as SAP_NEW with that they could access all the standard transactions in GUI. So is there a way we could have similar "SAPALL" kind of role which could serve the purpose?

Assigning roles per apps/flavor sounds cumbersome task. Appreciate if there is a better way or best practice available.

Thanks

Ritesh

[stian_windsland2]

First of all, you need to check if the steps in SU25 has been run after last upgrade. (One of the steps there, updates SAP_ALL / SAP_NEW with updated authorizations).

Then you need to make sure that all the standard SAP Fiori roles have been activated. This can be done by running STC01, and task list SAP_FIORI_CONTENT_ACTIVATION. (This created new business roles, activated ODATA/ICF services for roles, etc.). Then assign the business roles created from this job, to the user, which will then have access to ALL the Fiori Launchpad content without any blocks.