Creating Int4 Suite Roles for Int4 Suite apps access

Create Int4 Suite Access Roles in SAP PFCG

This article describes how to create roles from templates. Full list of templates can be found:

 https://help.int4.com/int4-suite-knowledge-center-library/3.15/role-templates

You can use this manual and the short video to create your own roles accordingly.

You will find informations regarding setting up authorizations to Fiori Apps.

1. Create the admin role from a template

• Open PFCG to create a new role.

• Create a single role.

• Provide the name for the role.

• Go to Change Authorization Data and apply the template, for example: /INT4/INTT_ADMIN.

• Generate again, save, and run user comparison so the assigned user gets the updated authorizations.

2. Create the Fiori and Odata access role

• Create a second single role for Fiori access.

• Save the role and switch to the Menu tab.

• Under SAP Fiori Launchpad, add the required catalogs.

• Add all catalogs that start with the INT4 prefix.

• Then add the required launchpad groups.

• Save the role after the catalogs and groups are added.

 Full list of Fiori Tile Groups and Tile Catalogs:

3. Add or verify service authorizations for the Fiori role

• Go to the Authorizations tab and generate the profile.

• Check whether the needed service authorization objects were added automatically.

• If they are missing, add them manually under the service authorization object S_SERVICE.

• Use the pencil/edit option to add the required service entries.

 Full list of OData Services Authorizations

4. Create the helper role for table access

• 

  Create a third role called helper.

• Go to Authorizations and generate the profile.

• Add the table authorization object manually S_TABU_DIS.

• Set the authorization group to INT4.

• Set the activity values to 02 and 03.

• Generate the role, save it, and assign the user.