over authorization

[bashayreh]

Hi everyone

in order to give access for a user on a fiori tile, I created a Role that contains the Technical Catalogue of that tile. the result is that the user is able to add new tiles and use them while he should not be able to do so. for example a sales representative is getting access to changing the cost price of items!

please advise what is the best way to solve my issue

best regards

[VeselinaPeykova]

You are not supposed to use technical catalogs directly for creating user roles.

The recommended approach is to create business catalogs referencing technical catalogs with only the needed apps, then you create groups (well thought out groups can make the life of users a bit easier) and use these when you create the PFCG roles.

For more information - refer to the official help documentation: Best Practices for Managing Catalogs.

There is also a nice self-paced openSAP course where this topic is really well explained: Key Technical Topics in a System Conversion to SAP S/4HANA. Enrolling is free of charge.

[bashayreh]

Many thanks veselina.peykova

I will go through your mentioned refrences

best regards

[former_member612251]

If its sandbox or dev, I dont see any issue with this approach, but for going forward into DEV, QA and PRD you should follow what Veselina has said.