SAP Knowledge Base Article - Public

3725648 - Some IAM apps are not available for direct assignment to business roles in SAP S/4HANA Cloud, Public Edition.

Symptom

  • Some IAM apps are not available for direct assignment to business roles in the "Maintain Business Roles" app under the IAM Apps tab.
  • Unable to determine whether the IAM app assigned to a business role is a direct assignment or inherited through a business catalog.

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental." 

Environment

SAP S/4HANA Cloud Public Edition

Reproducing the Issue

  1. Navigate to the "Maintain Business Roles" app.
  2. Go to the "IAM Apps" tab.
  3. Search for the IAM app to add it to the business role.
  4. Observe that no results are returned.

Cause

This is expected behavior. Not all IAM apps are available for direct assignment to a business role; some can only be assigned through a business catalog.

 

Resolution

  • If the assignment type of an IAM app (for example, F1927_TRAN) is "Business Catalog," it means that the corresponding business catalog (for example, SAP_FIN_BC_GL_CLOSING_PC) has been added to the business role, and the app is inherited under the IAM Apps tab. 
  • If the assignment type of an IAM app (for example, F0233A_TRAN) is "Direct," it means the IAM app has been directly added to the business role via the IAM Apps tab using the IAM app ID. 

Keywords

iam apps, direct assignment, business roles, assign apps dialog, f1927, f0798, business catalog, sap_fin_bc_gl_closing_pc, inconsistent behavior, sap s/4hana cloud public edition, identity and access management, assign apps, iam app search, role maintenance, business catalog assignment , KBA , BC-SRV-APS-IAM , Identity and Access Management , Problem

Product

SAP S/4HANA Cloud Public Edition all versions