SAP Cloud Platform Portal authorisation concept

[architectSAP]

Dear experts,

I got a SAP Cloud Platform Portal with 3 custom and one out of the box Fiori applications:

This got 4 Groups:

And 4 Roles:

However, whatever I configure in the SCP Authorisations, the only Role Assignment that seems to matter is that of TENANT_ADMIN:

If a users got that role, they see the above 4 tiles, if not, they see nothing, and even the Smart Business roles do not seem to make a difference.

Of course, I checked the documentation, but that states, that SCP Portal uses the SCP authorisation concept.

Is anyone aware of a guide how those two concepts hang together in detail?

Very many thanks in advance

Frank

[fabianaguimar]

I use the Neo Environment in my SCP. I have went in SERVICES => PORTAL => CONFIGUTE PORTAL => ROLES

In Roles, i can put the role name that i wanna use in Catalogs, Groups and Function. (Here is Function, for you is Roles).