3655397 - Is it possible to create one global role in SAP S/4HANA Cloud Public Edition where restrictions can be dynamically applied per user based on user attributes or other mechanisms? - SAP S/4HANA Cloud Public Edition

• It is not possible to create one global role in SAP S/4HANA Cloud Public Edition where restrictions can be dynamically applied per user based on user attributes or other mechanisms.
• Restriction types and fields are strictly maintained within the associated business roles, requiring predefined restriction values for each role.

SAP S/4HANA Cloud Public Edition

1. Attempt to create a single global business role template for the Finance Manager in SAP S/4HANA Cloud Public Edition.
2. Configure app and data access restrictions dynamically at the company code level based on user attributes.
3. Observe that the system only allows the creation of separate roles per country with predefined restriction values, preventing dynamic application of restrictions.

SAP S/4HANA Cloud Public Edition does not support dynamic application of restriction values based on user attributes such as region or location. Restriction types and fields are strictly maintained within the associated business roles, and these roles are assigned to users with predefined restriction values.

1. Understand that SAP S/4HANA Cloud Public Edition does not support dynamic application of restriction values based on user attributes.
2. Restriction values must be predefined and maintained within the associated business roles.
3. Create individual business roles for each country, applying company code restrictions per role to ensure compliance and access control.

sap s/4hana cloud, business role, finance manager, company code restrictions, dynamic restrictions, identity and access management, predefined restriction values, global role template, sap cloud limitations, access control , KBA , BC-SRV-APS-IAM , Identity and Access Management , Problem