Business Catalog Assignment
A Business Role in SAP BTP is a collection of authorizations that defines what a business user is permitted to access and do within a system. Developers and administrators create and maintain business roles — optionally using a business role template as a starting point — and then assign those roles to users to control their access. Roles can be configured with restrictions to limit access to specific data or objects, or set to provide unrestricted access depending on the scenario, as described in maintaining authorizations.
Tutorials that teach this
- Tutorial S/4HANA ABAP Extensibility - Custom Code List
- Tutorial Maintain Business Roles and Access Restrictions in SAP BTP, ABAP Environment
- Tutorial Create Business Users, Configure Roles and Business Configurations
- Tutorial Maintain Business Roles and Restrictions in SAP S/4HANA Cloud, public edition
- Tutorial Providing Authorization Control for a Business Configuration Maintenance Object
- Tutorial Integrate List Report into ABAP Fiori Launchpad
Docs explaining this concept
- Doc Business Role – Business Catalog Entity
- Doc Creating a Business Role Template (Optional)
- Doc Creating a Business Role with Restrictions and Assigning It to Users
- Doc Enable Usage of the Approve ATC Exemptions App
- Doc Enable Usage of the Configure ABAP Test Cockpit App
- Doc Maintain Business Roles and Business Users
- Doc Maintain Business Roles and Business Users
- Doc Maintaining Authorizations
Prerequisites
- Concept Business Role and Authorization Management Business Role and Authorization Management is the SAP BTP framework that developers use to define, package, and expose access controls for business services so that administrators can assign them to business users. A developer creates an [IAM App for the business service](https://help.sap.com/docs/btp/sap-business-technology-platform/2a2ddf967a704a878ee975f44630f71d?locale=en-US&state=PRODUCTION&version=Cloud) and then groups related authorizations into a [Business Catalog](https://help.sap.com/docs/btp/sap-business-technology-platform/d120838ba15c433ea6f15446dfe6ecf9?locale=en-US&state=PRODUCTION&version=Cloud), making predefined authorizations available for assignment to business roles. Developers can further refine access by defining restriction types and restriction fields based on authorization fields, enabling field-value-level access control for business users.
- Concept Business Role Maintenance A **check table for authorization fields** is a database table in ABAP development that defines the valid values permitted for a given authorization field. Developers create it to ensure that only recognized, predefined values can be assigned when maintaining authorizations, helping to enforce consistent and controlled access checks. You can learn more in the [SAP BTP documentation on creating a check table for authorization fields](https://help.sap.com/docs/btp/sap-business-technology-platform/e7cfd14ae7d442d6ae553867ba7acd37?locale=en-US&state=PRODUCTION&version=Cloud).
- Concept Business Role Template A **Business Role** is an authorization object on SAP Business Technology Platform that groups together business catalogs and their associated app authorization variants, which an administrator then assigns to business users to control their access to applications and data. Developers prepare the underlying authorization artifacts — such as [business catalogs](https://help.sap.com/docs/btp/sap-business-technology-platform/42c6a55947fe4bc89bd63b0f50b54c8a?locale=en-US&state=PRODUCTION&version=Cloud) and optional [business role templates](https://help.sap.com/docs/btp/sap-business-technology-platform/fa8d75534c5a43bd91985dc5fce98d09?locale=en-US&state=PRODUCTION&version=Cloud) — so that administrators can create business roles and assign them to users. After a system upgrade, administrators must also manage any changes introduced to business role templates to keep roles consistent.
- Concept Business Catalog A **business role** is an authorization object that an administrator creates by combining one or more [business catalogs](https://help.sap.com/docs/btp/sap-business-technology-platform/e1ae7ec47f1e43479ae4e8e3b19677b5?locale=en-US&state=PRODUCTION&version=Cloud) to define a set of access rights for business users. Administrators use the [Maintain Business Roles](https://help.sap.com/docs/btp/sap-business-technology-platform/8980ad05330b4585ab96a8e09cef4688?locale=en-US&state=PRODUCTION&version=Cloud) app to create, edit, and assign these roles to users, granting them the authorizations they need to perform their tasks. Developers can also provide business role templates as a starting point to help administrators create business roles more efficiently.
- Concept IAM Business Roles A **business role** in SAP Identity and Access Management (IAM) is a collection of access rights that an administrator assigns to business users to control what they can do within an application. Developers and administrators use business roles to group and manage authorizations, which are then assigned to business users to grant them the permissions they need. You can monitor the distribution of business roles and their assignments using tools such as the [IAM Key Figures](https://help.sap.com/docs/btp/sap-business-technology-platform/f249696fdfb8401eb18cf3ade365b8c1?locale=en-US&state=PRODUCTION&version=Cloud) app, and find standardized terminology in the [Glossary for Identity and Access Management](https://help.sap.com/docs/btp/sap-business-technology-platform/84a11597c3b54d85af23577da7952298?locale=en-US&state=PRODUCTION&version=Cloud).
- Concept Business Role Assignment The concept name was not provided, so a precise definition cannot be determined. Based on the available sources, the content relates to **Business Users** in SAP Business Technology Platform — individuals whose user data (such as user name) can be maintained, mass-updated, or locked when inactive. Developers and administrators manage business users by [maintaining user data](https://help.sap.com/docs/btp/sap-business-technology-platform/db1d0b4119d74dc6970adde9c85069b4?locale=en-US&state=PRODUCTION&version=Cloud) and assigning business roles that control access and authorizations, or by using the [inbound service `MANAGEBUSINESSUSERIN`](https://help.sap.com/docs/btp/sap-business-technology-platform/a631f4ead22743598f1d14474384beb3?locale=en-US&state=PRODUCTION&version=Cloud) to synchronously replicate and manage business user data programmatically.
- Concept Business Role Management A **Business Role** is a grouping of authorizations — defined through business catalogs and restriction values — that an administrator creates and assigns to business users to control what they can access and do within an SAP system. Administrators use the [Maintain Business Roles](https://help.sap.com/docs/btp/sap-business-technology-platform/8980ad05330b4585ab96a8e09cef4688?locale=en-US&state=PRODUCTION&version=Cloud) app to create and edit business roles, add business catalogs, and manage restriction values. Once configured, a business role is [assigned to business users](https://help.sap.com/docs/btp/sap-business-technology-platform/362a851467d6413c8790b2d72516a7c9?locale=en-US&state=PRODUCTION&version=Cloud) to grant them the appropriate authorizations for their tasks.
Concepts that build on this
- Concept IAM App Creation
- Concept KPI Creation in SAP S/4HANA Cloud
- Concept Maintain Business Roles Restriction Fields
- Concept Communication Management
- Concept Custom Catalog Extension Configuration
- Concept Business Role Restrictions
- Concept ABAP CDS View Creation and Development
- Concept SAP Fiori Launchpad App Descriptor Item
- Concept SAP Fiori Launchpad Administration
- Concept Custom Reporting Design in SAP S/4HANA Cloud
- Concept Fiori Launchpad App Integration
- Concept Custom Analytical Queries in SAP S/4HANA Cloud
- Concept Key User Extensibility in SAP S/4HANA Cloud
- Concept Maintain Business Roles App
- Concept Key User Adaptation for SAP Fiori Elements Applications