3686284 - Business roles have directly assigned IAM apps unexpectedly - SAP S/4HANA Cloud Public Edition

• Some business roles have directly assigned IAM apps, which is unexpected behavior.
• The maintain business roles app only provides options to activate or assign apps from business catalogs, with no option to add apps directly.

SAP S/4HANA Cloud Public Edition

1. Access the "Maintain Business Roles" app in SAP S/4HANA Cloud Public Edition.
2. Edit a business role.
3. Observe that the assignment type of the IAM app F4568_TRAN in the business role is "direct" instead of being assigned through business catalogs.

Due to some gaps in the "Check Dependencies" Dialog it was also possible to assign IAM Apps directly.
This feature should have only been enabled for internal usage and testing.
This gap is also already closed and you are not able to add IAM Apps directly currently until 2602 release.

Go to "Edit" mode, remove this direct assigned app.
By selecting it, a "Remove" button will appear and the app can be removed.

Refer to: SAP Fiori Apps Reference Library  

Refer to: Business Catalog SAP_FIN_BC_OH_PE_PSE_PC

SAP S/4HANA Cloud Public Edition, maintain business roles app, business roles, directly assigned apps, business catalogs, F4568_TRAN, SAP_FIN_BC_OH_PE_PSE_PC, unexpected app assignment, identity and access management, role assignment issue , KBA , BC-SRV-APS-IAM , Identity and Access Management , Problem