Symptom
- Some IAM apps are not available for direct assignment to business roles in the "Maintain Business Roles" app under the IAM Apps tab.
- Unable to determine whether the IAM app assigned to a business role is a direct assignment or inherited through a business catalog.
"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."
Environment
SAP S/4HANA Cloud Public Edition
Reproducing the Issue
- Navigate to the "Maintain Business Roles" app.
- Go to the "IAM Apps" tab.
- Search for the IAM app to add it to the business role.
- Observe that no results are returned.
Cause
This is expected behavior. Not all IAM apps are available for direct assignment to a business role; some can only be assigned through a business catalog.
Resolution
- If the assignment type of an IAM app (for example, F1927_TRAN) is "Business Catalog," it means that the corresponding business catalog (for example, SAP_FIN_BC_GL_CLOSING_PC) has been added to the business role, and the app is inherited under the IAM Apps tab.
- If the assignment type of an IAM app (for example, F0233A_TRAN) is "Direct," it means the IAM app has been directly added to the business role via the IAM Apps tab using the IAM app ID.
Keywords
iam apps, direct assignment, business roles, assign apps dialog, f1927, f0798, business catalog, sap_fin_bc_gl_closing_pc, inconsistent behavior, sap s/4hana cloud public edition, identity and access management, assign apps, iam app search, role maintenance, business catalog assignment , KBA , BC-SRV-APS-IAM , Identity and Access Management , Problem
SAP Knowledge Base Article - Public