Symptom
The tenant has been upgraded to release 2502.
- Collection has "importing" status for a long time.
- Business roles cannot be changed/saved using the "Maintain Business Roles" application.
- Fiori Applications are missing unexpectedly.
Environment
SAP S/4HANA Cloud Public Edition 2502
Reproducing the Issue
The tenant has been upgraded to release 2502.
- Go to "Import Collection" application.
- Try importing a collection.
- Notice the collection has "importing" status for longer than expected.
- Go to "Maintain Business Roles" application.
- Edit a business role.
- Try to save it.
- Error: Bus. Role XYZ is outdated.
Resolution
There is a Post Processing running for all business roles due to the introduction of IAM Apps of type app authorization variant after the 2502 Upgrade (IAM App - App Authorization Variant | SAP Help Portal).
This Post Processing is dependent on the number of Business Roles and the respective Business Catalogs and Users that have been assigned to the roles.
The process first must finish until the software collections can be processed and business roles can be modified.
The Post Processing due to the introduction of IAM Apps of type app authorization variant must be triggered in all tenants after their upgrade, including production tenant.
A fix was delivered with HFC03 to mitigate the impact of the post processing activities in systems with a large number of business roles and business users.
The post processing activities were now split in two steps:
- First step includes the generation of the artifacts associated to the existing business roles to adjust them to the IAM Apps of type app authorization variant feature.
- Second step include the removal of the legacy artifacts associated to the business roles that are replaced by the generated artifacts in the previous step.
NOTE: In exceptional cases with a big amount of Roles and Assigned Business Users could take longer than expected, but it will be less impactful than during the test upgrade in any case.
Keywords
KBA , BC-SRV-APS-IAM , Identity and Access Management , Problem