3315526 - No authorization to create user group | Maintain Business User Groups

• You're trying to create a new Business User Group with Maintain Business User Group app but you are receiving the error message "No authorization to create user group ZCB".
• You have the Business Catalog SAP_CORE_BC_IAM_GRP_PC assigned to your user.

SAP S/4HANA Cloud

1. Go to Maintain Business User Groups app
2. Click on "Create" button
3. Choose the name of your Business User Group
4. Click on "Create" again
5. Error message is triggered

The Business Role containing the authorizations for the application is restricted with Display Only access. You can find this information in the Business Role details on the upper side of the page in "Write Access" field. The business role will be maintained with "Write Access: No Access".

In order to provide edit access to the user you need to maintain the Business Role changing the "Write Access" restriction to "Unrestricted". You can do this by following the steps below:

1. Open the Business Role in edit mode
2. Click on "Maintain Restrictions" button
3. In the "Write, read and value help" tab, click on the dropdown
4. Select "Unrestricted"
5. Save/publish the role

Please note that this restriction will apply to ALL Business Users that are assigned to this Business Role and to ALL Business Catalogs.

If you do not want to apply this unrestricted access to all users and catalogs inside this role, I recommend you to create a new Business Role with access to this app with "Unrestricted" restriction. 

For more information, please check SAP Help Portal | How to Define Authorizations Based on Restrictions.

create, Business User Group, Maintain Business User Groups. app, application, error message, no authorization to create user group ZCB, business catalog, SAP_CORE_BC_IAM_GRP_PC, assigned, restriction, restricted, write access, no access, authorization , KBA , BC-SRV-APS-IAM , Identity and Access Management , Problem