How can I activate the apps in this role by this rapid method? SAP Fiori is SAP’s design system providing a consistent user experience for SAP software across platforms and devices. For example, using filter SAP Fiori apps for SAP S/4HANA, then sub-filter by Roles and searching for roles by keyword “maint”, you can find the Maintenance Technician role and its definition. You may find it helpful to start by considering who should NOT be the Role Owner: Based on project experiences, our recommendation to you would be: Should your UX architect be the role owner? You can see the security role name listed as the technical id of the business role. Be aware that in some cases, there may be decomposition of a task to more than one successor app. From the previous blog posts in this series, you already know that you use business roles primarily to authorize users to access SAP Fiori launchpad content. Roles in the backend system (ERP) Task list SAP Fiori - Content activation for SAP Business Roles (SAP_FIORI_CONTENT_ACTIVATION) facilitates both: the generation of SAP business roles for tests in the sandbox system; and the activation of SAP Fiori apps based on business roles delivered with SAP S/4HANA as templates. You can test activated administrator role by creating a test user and assigning Admin composite role (Z_FIORI_FOUNDATION_ADMIN) & end user role Z_UI2_USER_750.  Then, login with test user and launch Fiori UI either via t-code /UI2/FLP or entering url.  You will see admin associated apps displayed as shown below: After activating SAP Foundation, you are ready to activate Fiori Content.  We use Fiori Content activation task list to activate all applications associated with selected business roles.  For each business role the activation process will perform following tasks: As I mentioned above, you can select bunch of business roles to activate or start with one or few. For example, you can: Once the app assignment to the custom business role is finalized, you can adjust the home page(s) to help the business users focus on the entry points to their most important daily tasks. SAP Fiori provides all business roles in real time on compatible hand devices. This means that when you upgrade your SAP S/4HANA release it is important to check for deprecated and successor apps, and to move to the successor app as part of your upgrade. For each SAP Business Role, the SAP Fiori apps reference library lists the total number of SAP Fiori apps available. Business roles also provide users with a default layout of the assigned launchpad content, which … This WIKI provides a list of the relevant roles in the backend and in the gateway system. Including S4 Hana, Fiori, Solution Manager 7.1/7.2 and on Hana Databases and other DB’s. In SAP S/4HANA Cloud you can find all the available business roles – and these Business Roles can be created and edited – in SAP Fiori app F1492 Maintain Business Roles, Find out more about maintaining SAP Business Roles in SAP S/4HANA Cloud in the SAP S/4HANA Cloud Community blog post: How to Manage Authorizations by via Business Roles for Customer and Supplier Business Partner Master Data in S/4HANA Cloud. After you have activated content for those 3 business roles, you will work with each workstream functional specialist to collect list of roles to be activated.  Usually, they already have this collected through scope IDs and related test scripts. Assign a space to a PFCG role; Create a page using Manage Launchpad Pages app; Switch to the spaces mode in the launchpad user settings; So let’s begin. With so many Fiori Apps available it becomes very challenging for Clients migrating to S/4 Hana to select Fiori Apps applicable for their usages. • It is designed according to the simple and intuitive SAP Fiori user experience, while supporting classic UI … What do we mean by SAP Business Roles? Yes absolutely – provided it meets the needs of your real business role. It activates all associated Web Dynpro for ABAP applications, Generates profiles for all business roles with default authorizations, Optionally, you can also generate a Test user for each business role, Ensure Process mode is set to’ co-deployed only’, business roles that you want to activate content for are listed in second task’s parameter. the concept of role-based portal pages, Apps and classic UIs that match the on-system tasks of that business role, Networked navigation between related apps, classic UIs, and the SAP Fiori Launchpad, Markings for which apps, classic uis, and navigations are relevant for different device types – desktop/laptop, tablet and phone, Where not relevant, apps/uis are hidden by default, A default assignment of Launchpad content for the home page (Fiori 2.0) or pages (Fiori 3), 295 roles have SAP Fiori apps and classic UIs assigned, and. SAP HCM – e.g. You can use this to set expectations with business stakeholders and others. You can see this for SAP S/4HANA AnyPremise by selecting the filter SAP Fiori apps for SAP S/4HANA, then sub-filter by Roles, and then search for the role by keyword, e.g. This new functionality in SUIM allows to search the roles with SAP FIORI catalogs and groups. I appreciate your comments and will sure to keep those 2 recommendations in mind. General Ledger Accountant has security role SAP_BR_GL_ACCOUNTANT. With these Business Roles, life would be much easier for business users in identifying specific Fiori Apps they need for their business functions. They may take on this responsibility during your project – at least they are primarily concerned with the end to end user experience. You need to have the right business role assigned to your SAP user ID in order to see Fiori Apps on your Launchpad. That brings us to a last and very important question…one that in our experience many customers overlook…. For example where feedback from customers has indicated that this task is performed differently by different roles. How is the concept of Business Roles applied to SAP S/4HANA? These Business Roles would definitely help them. Create custom user roles based on the already existing business roles of your client's organization Create business catalog with the intended applications for that role (1 catalog : 1 role). You need to click on parameter for task ‘Select/Confirm SAP Business Roles for FLP Content activation’ and enter list of roles that you would like to activate. Custom business roles reflects how a real business role is applied within a specific organization. But now I'm activating a HCM related business role SAP_HCMFAB_BCR_EMPLOYEE_T which I can't find in the list. Color balance refers to the recommended mixture of light and dark, colored and non-colored areas of any SAP Fiori app interface. They may need to wear personal protective equipment such as gloves, which may provide some challenges to how and when he/she can use touch-enabled devices. Tip: Where a business user is responsible for multiple business roles, they can be assigned to all the relevant security roles. Generally activating Foundation tasks will execute basic configuration for Fiori Launchpad, SAP GUI for HTML, activates ICF Node, activates ODATA services required for WebGUI.  Additionally, it generates couple of roles including one composite role for Administrator and one single role for end user. You need someone to be the final arbiter – the key decision maker – on what is or is not a part of your real-world business role in your organization. Ownership drives the quality of your User Experience. This aligns to the new capabilities of SAP S/4HANA releases as Lines of Business, business processes, and related business roles are simplified, refined, and expanded over time to include more intelligent technologies and other new business value innovations. At the upper end, there are over 70 SAP Fiori apps (i.e. Additionally, it generates couple of roles including one composite role for Administrator and one single role for end user. With SAP S/4HANA 1909 we also recommend activating role. Taking “a day in the life” approach, the business role includes the person’s: See how this works with 2 examples from SAP S/4HANA: Maintenance Technician – performs and confirms planned and unplanned maintenance work on machines, equipment and facilities efficiently and safely. She has been working with Australian Public Sector customers and customers in government regulated industries where segregation of duties and strict authorization requirements are the norm. For example, you will need someone to be the final arbiter on: You will need someone to decide what are the most important tasks/activities that are needed every day. While the rise of design thinking and SAP Fiori has increased the focus on Business Roles, historically SAP has used Business Roles in a variety of solutions. Copy the role SAP_UI2_USER_700 to Z_SAP_UI2_USER_700. SAP has already delivered over 500 Business Roles with SAP S/4HANA and 300 Business Roles with SAP S/4HANA Cloud. all the related tasks of a specific business process. SAP has already delivered over 460 SAP Business Role templates for SAP S/4HANA, and 300 business role templates for SAP S/4HANA Cloud. Assign Administrator Role for SAP Fiori Launchpad to Administrat – Configuration of SAP Fiori Infrastructure – SAP Libra… (740) User, Developer, and Administrator Roles – SAP Gateway Foundation (SAP_GWFND) – SAP Library Authorizations – SAP NetWeaver User Interface Services – SAP … Thanks Sanjay - yes that’s the idea. SAP_MM_PO_APV_APP (Find it in the Fiori Apps Library) Steps: Example setting for runtime user role in the Frontend server. Dear, you should know the all roles & tasks responsibilities as a SAP Basis Consultant. The use of role-based applications in SAP Fiori is a significant change in approach compared to previous generations. • It runs on multiple devices, using the responsive design paradigm. In fact, that’s the purpose of providing SAP Business Role templates. However that’s not expected – usually the template is going to contain more than you need and will need to be refined to what you actually want to use. It provides a set of applications that are used in regular business functions like work approvals, financial apps, calculation apps and various self-service apps. SAP recommends selecting less than 100 business roles at a time. SAP Fiori user experience is role-based, adaptive, simple, coherent, and delightful. You should recognize it is more challenging to organize the launchpad content for people who perform multiple business roles, and these people will have the greatest need to use personalization to optimize their launchpad layout. You can see this if you select the relevant product suite, then aggregate all apps and classic UIs. Remember that each role is provided as a template. You need to execute Foundation tasks before running Content activation tasks. Major decisions on the role should be owned by: Enabled to continue making these decisions before and after go-live, Business roles – the security authorization administrator’s view.  For example: After you have selected business roles, you click on ‘Start/Resume Task List Run in Dialog’ or ‘Start/Resume Task List Run in Background’. Add authorization default in the menu tab. R3TR IWSV is for embedded deployment. SAP Fiori launchpad content manager, selecting a catalog and the Catalog View button. By convention, these security roles start with “SAP_BR_” e.g. The delivered business role templates include 370 leading business roles and just under 100 additional business roles. In other words, designed for your business role. That is in standalone mode you will need both a frontend and backend security role - you will find more on how this works in our earlier blog on  Frontend and backend role generation programs. Can I use the delivered SAP Business roles as-is? He has 12+ years’ of IT experience and 4+ years in SAP Fiori and Mobility. Note: R3TR IWSG is for Hub deployment. Step 2. The Business Role and Business Catalog design gives you a number of possibilities in how you can apply SAP Business Roles to your specific needs. there are many security roles in your SAP S/4HANA system that are not considered business roles. SAP Fiori SAP Fiori is the design language that brings great user experiences to enterprise applications. You can imagine a Maintenance Technician needs to travel to different machines, equipment or facilities, and that travel is part of their off-system activities. You can imagine an off-system task for a General Ledger Accountant might be sending the financial statements to the board of directors. Remember me ; Log On. With SAP Fiori the focus on business roles has increased dramatically. (I have access to that through SAP Learning Hub) Jurjen Because they travel a lot, their primary device is likely to be a tablet or phone, or more likely both. From the earliest days of SAP Fiori in 2013 the first – and arguably the most important – design principle of SAP Fiori is role-based, i.e. You may receive some errors.  You can re-run these tasks.  With successful completion of these tasks, you will see Z_ version of business roles. I have shown an SAP delivered business role and Z version role generated after activation.  As you can see in these screenshots, the menu changes with addition of individual apps.  Also, you can see the role has no authorization before activation and authorization is added after activation. SAP Fiori provides the right information at the right time and reflects the way you actually work. Color plays a significant role in SAP Fiori. Business Role – a basic definition for everyone (including business stakeholders), SAP Business Roles – a cross-solution perspective, What’s included in a SAP Business Role for SAP S/4HANA, SAP Business Roles and the SAP S/4HANA roadmap, Creating custom Business Roles for your organization, Becoming a SAP Fiori for SAP S/4HANA guru, Creating Custom Content for Business Roles, Adding selected content SAP content to a custom business role, Overview of tools for maintaining custom launchpad content and layout, Granting Project Users SAP Fiori Launchpad Access – Extras, Searching for Target Mapping Parameters using the launchpad content manager, How Adding Business Catalogs to the Role Menu automates authorisation maintenance, How business roles simplify refining UX for SAP S/4HANA, Combining business catalogs into custom business roles, Granting Project Users SAP Fiori Launchpad Access, How SAP Business Roles simplify deploying SAP User Experience, On Building Great Experiences for Our Users, Adding Apps from Business Roles or Business Catalogs to the Current Selection, How to Manage Authorizations by via Business Roles for Customer and Supplier Business Partner Master Data in S/4HANA Cloud, How business roles simplify deploying UX for SAP S/4HANA, Frontend and backend role generation programs. In this example you can see General Ledger Accountant in SAP S/4HANA 1511: You can compare this to General Ledger Accountant in SAP S/4HANA 1909 FPS02: For example, for General Ledger Accountant there were: Of the total 70 apps in the SAP Fiori apps reference library, 8 apps have been replaced with successor apps. The abbreviations in brackets behind the entities’ names are used as identifiers in the technical names of the actual object instances. SAP Fiori is designed for your business, your needs, and how you work. in lean organisations or locations some people may have responsibility for multiple business roles. This report is useful in front and back-end systems. For example, SAP delivered role SAP_BR_AA_ACCOUNTANT will be generated as Z_BR_AA_ACCOUNTANT. activating apps in your SAP S/4HANA system; designing the business catalogs that assign apps to user’s authorization roles; and managing the layout of content on the SAP Fiori launchpad home page. There are three business roles that are required for configuration:  SAP_BR_ADMINISTRATOR (Administrator), SAP_BR_ANALYTICS_SPECIALIST (Analytics Specialist), and SAP_BR_BUSINESS_PROCESS_SPEC (Business process Specialist).   It’s best to start with these 3 roles first. You can select and open a business catalog using the Catalog View button. Latest Update 29 July 2020: Introducing 2 colleagues –  Colleen Hebbert and Imran Mohammed   – who are expanding on this topic with real world lessons learned that show how customers are approaching business roles, business catalogs, and SAP Fiori security authorizations design. This brings you into the Catalogs tab displaying the selected business catalog. Because they do detailed and complex financial work, their working environment is likely to be a desk in an office or working from home, and their primary device is therefore a desktop/laptop. If a role needs more than one catalog, it should probably be created as a composite role. If you would like to find out more about the difference between Leading and Additional Roles you can find that in the Help documentation for the SAP Fiori apps reference library in the section Adding Apps from Business Roles or Business Catalogs to the Current Selection. You can do this by simply selecting all apps for the business role, aggregating and adjusting the target release. For example, by selecting main filter All Apps for SAP S/4HANA, then All Apps, then press the Select All icon button at the top of the app list, and then press the Aggregate button in the footer. So, the real responsibility of the UX architect is to identify the responsible role owner. The business role includes everything they do that is related to their workplace responsibilities. SAP Fiori is a new user experience (UX) for SAP software and applications. You can see the journey for different roles by looking at what is available for different releases. The catalogs, groups, and roles required for each of the SAP Fiori apps are listed in the app-specific documentation in the section SAP Fiori Apps. Back End server − OData provider. You can find historical analogies and parallels in SAP solutions such as: Similarly, solutions such as SAP Identity Management, SAP Access Control, and SAP Identity Access Governance use business role constructs to facilitate user provisioning of the technical enablement of the business role. Revisit this blog post from time to time and you will find the latest blogs linked and summarized at the end of this blog post. General Ledger Accountant – carries out daily activities in general ledger, for example by recording transactions and making adjustment postings, and preparing financial statements. Very interesting blog and thanks for writing in great details. The SAP standard roles SAP_UI2_USER_700 and SAP_UI2_USER_750 are considered predefined SAP Fiori roles for users and are templates that can be copied. You can see these business catalogs in the tools provided as part of your SAP S/4HANA AnyPremise solution, such as SAP Fiori launchpad content manager and SAP Fiori launchpad designer. Their latest blogs are now added to the more blogs section. Additional business roles combine existing content from leading business roles in new ways to meet specific use cases. Example app – Manage Purchase Orders (F0842A) has these roles: Business role SAP_BR_PURCHASER and Back-End Authorization Role SAP_BCR_MM_PO_PROCESS. Depending on the role and the catalogs assigned to the role, users can browse through the catalogs and choose the apps that they want to display on the entry page of the SAP Fiori launchpad. IMPORTANT:  The reverse is not true, i.e. SAP_FIORI_CONTENT_ACTIVATION that provides a list of tasks for activating Fiori Content by selecting business roles. When after creating a Fiori project, some authorization objects related to processes are needed. E-Mail, ID, or Login Name . I haven't seen an authorization specific training yet but found the UX100 "SAP Fiori - Foundation" training materials very helpful. If not, whether you can use at least some of the SAP business catalogs as a starting point for your custom role, Or whether you need to build a new custom business role from scratch.