Does business catalog controls the actual permissions of the application?

[YuAkiyama]

Dear Experts.

I'm wondering about a permission of application.

To customize spaces and pages, I created brand new business role (Role A) and its launch pad page.

In "Role A", I added business catalogs to include applications, which was not in a original role template.

As I finished setting, my user can now see customized pages with all applications.

After this customization I only attached one role, the "Role A", to a brand new business user.

Now, the brand new user can see all applications, and looked like it can actually use the all of applications like my user can.

I was thinking business catalogs were needed only to "add applications in pages," but as I watch this phenomenon, I got curious that "Does business catalog controls the actual permissions of the application."

[Gabriel_Gomez · Accepted solution]

Hello cct.yu.akiyama,

Short answer is yes, the business catalog contains the restrictions and the authorizations associated to each application, if you are interested you can find more information here:

Authorization Concept for Business Users

https://help.sap.com/docs/SAP_S4HANA_CLOUD/b249d650b15e4b3d9fc2077ee921abd0/12032b657e104bb7ac4da02b...

How to Define Authorizations Based on Restrictions

https://help.sap.com/docs/SAP_S4HANA_CLOUD/a630d57fc5004c6383e7a81efee7a8bb/c926d691d7144f7dba16f8e1...

Search for the following document within the Accelerators of the Activate Methodology, this one specially explains it in detail:

Authorization Concept for S4HANA Cloud.pdf

Regards,

Gabriel

[junwu]

catalog determines what tiles user can eventually see/use

once you assign the catalog to role , which is assigned to user, user will see/have access to all of tile in the catalogue.

[Neeraj_Jain]

Hello cct.yu.akiyama,

Please refer below SAP Press Blog. Might it helps.

https://www.google.com/amp/blog.sap-press.com/sap-hana-security-how-to-grant-object-privileges-with-...

Regards,

Neeraj Jain