SAP Knowledge Base Article - Public

3783013 - Price Category Calculation Includes Directly Assigned IAM Apps - SAP S/4HANA Cloud Public Edition 2608

Symptom

Starting with SAP S/4HANA Cloud Public Edition 2608, the price category of a business role is determined by both assigned business catalogs and directly assigned IAM apps.

  • The price category displayed for a business role in the Maintain Business Roles app will not only reflect the highest price category among all assigned business catalogs.
  • If a directly assigned IAM app carries a higher price category than all assigned business catalogs, that IAM app determines the business role's price category. 

Environment

SAP S/4HANA Cloud Public Edition 2608

Reproducing the Issue

In Maintain Business Roles application:

  1. Assign a business catalog with price category "Self-Service" to a business role.
    • Under the "Business Catalogs" tab: note the "Price Category" column.
  2. Assign an IAM app with price category "Advanced" to the same business role (Direct assignment).
    • Under the "IAM Apps" tab: note the "Price Category" column is not displayed by default, but it can be added using the "View Settings" of the IAM Apps table.
  3. Open the Maintain Business Roles app and observe the displayed price category for the business role.
    1. With SAP S/4HANA Cloud Public Edition 2602, the price category of the role was "Self-Service"
    2. As of SAP S/4HANA Cloud Public Edition 2608, the price category of the role is "Advanced"

Cause

From a business point of view, the price category of a business user is based on the solution capabilities available for that business user.

Before SAP S/4HANA Cloud Public Edition 2602 apps could only be assigned to business roles via business catalogs. The technical price category calculation was based on business catalogs only, which was consistent with the business view.

With SAP S/4HANA Cloud Public Edition 2602, the features to activate, deactivate, assign, or remove individual apps were delivered to address two fundamental issues with business catalogs:

  1. the option to only assign full business catalogs to users does not allow fine granular assignment of authorizations - which was a security concern (enable the paradigm of least possible authorizations).
  2. the option to only assign full business catalogs to users does not allow fine granular pricing. If a user only needs a few cheaper apps out of a more expensive business catalog, the cheaper apps can be assigned to the business role directly. With SAP S/4HANA Cloud Public Edition 2608, this pricing flexibility is realized: assigning individual lower-tier apps directly instead of a full catalog can reduce the price category for a role. Conversely, if a directly assigned app carries a higher price category than the assigned catalogs, it will determine the role's price category accordingly.

With the introduction of direct app assignment in SAP S/4HANA Cloud Public Edition 2602, the technical price category calculation was still based on business catalogs only. Directly assigned apps were incorrectly not considered for calculation. There was a mismatch between business view on pricing and actual technical calculation.

With SAP S/4HANA Cloud Public Edition 2608, the calculation was extended to include directly assigned IAM apps. Business view and technical calculation are matching again, all solution capabilities, regardless of assignment method, are reflected in the price category calculation.

Resolution

The price calculation for a business role/user is performed based on assigned business catalogs and IAM Apps (direct assignment of IAM app to business role).

The following options may help to reduce the price category of a business role:

  1. If directly assigned apps are not needed in a certain business role, remove the app from the business role.
  2. If expensive apps with broad functionality are only needed for some users with a narrow functional scope, check the Fiori Reference Library (https://fal.cloud.sap) for alternative apps (for example, a self-service app for checking one’s own objects status instead of a full “Manage All Objects” app)
  3. If apps are only needed in a read-only variant:
    1. Some display-only apps are delivered by SAP and usually have a lower price category than the full-featured apps.
    2. Several apps can be configured as display-only by setting the write access category to “No Access” in the restrictions of a business role. This reduces the price category to “Self Service”.

      

For the User Type licensing model, use the IAM Information System (F2450) app to review how directly assigned IAM apps affect role and user price categories.

 

Keywords

maintain business roles, business role price category, iam apps, direct assignment, price calculation, business catalogs, self-service, advanced, role display mismatch, fue, 2608 release, s/4hana cloud public edition, identity and access management, catalog price, app tile pricing , KBA , CA-GTF-IAM , S/4HANA Cloud: Authorization Content , BC-SRV-APS-IAM , Identity and Access Management , Problem

Product

SAP S/4HANA Cloud Public Edition 2608