Symptom
User navigates to the SAP Business Application Studio (BAS) URL and receives the error:
"You do not have the necessary roles to access SAP Business Application Studio."
This occurs even though the user believes they have the correct authorizations assigned. Authentication with the Identity Provider (e.g., Microsoft Azure AD) completes successfully, but the BAS session cannot be established.
Read more...
Environment
- SAP Business Technology Platform (BTP)
- SAP Business Application Studio
- Identity Provider: Microsoft Azure AD (or custom IdP via SAP IAS trust configuration)
Product
Keywords
BAS, Business Application Studio, Access Denied, role collection, Business_Application_Studio_Developer, Azure AD, Trust Configuration, BTP, authorization, missing role , KBA , CA-BAS-WS-MNG , Dev Space Manager - SAP Business Application Studio , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.
SAP Knowledge Base Article - Preview