SAP Knowledge Base Article - Public

3586595 - How to Restrict Application Access Based on User Business Role and Business Catalog Assignment in SAP S/4HANA Public Cloud

Symptom

  • User would like to restrict the application access based on business role and business catalog assignments.
  • How does the new 'IAM apps of the app authorization variant type' feature work in SAP S/4HANA Public Cloud, and how does it impact business role and catalog assignments? 

Environment

SAP S/4HANA Cloud Public Edition

Cause

In S4HANA Public cloud there is no option to create the business catalog as per the business requirement 2633830 - No Option To Create Business Catalogs in SAP S/4HANA Cloud Public Edition - SAP for Me

Resolution

As of SAP S/4HANA Public Cloud 2502, the new feature 'IAM apps of the app authorization variant type' is available.

  • The activation/deactivation of IAM apps of type 'app authorization variants' in a business role will be possible based on assigned business catalogs.
  • Assignment of individual IAM apps of type 'app authorization variants' directly to business roles is available with 2502.

Steps to restrict application based on user role assignment

  1. Open the 'Maintain Business Roles' app.
  2. Search for the user role (e.g., BR_AP_ACCOUNTANT).
  3. Click on "Edit"
  4. Click on "IAM apps" column
  5. Search for the application 
  6. Select the application
  7. Activate/Deactivate the IAM app based on the requirement.

See Also

Refer to What's New for more information IAM App - App Authorization Variant and below documentation:

Keywords

SAP S/4HANA Cloud Public Edition, IAM apps, app authorization variant type, business roles, business catalogs, control of apps, IAM Apps of the App Authorization Variant Type, Maintain Business role, Maintain Business user, activation/deactivation of IAM apps, S4_PPC, S4_1C , KBA , BC-SRV-APS-IAM , Identity and Access Management , How To

Product

SAP S/4HANA Cloud Public Edition all versions