How to use the Maintain Business Role Groups functionality

[Tayane]

Hello Community,

 

With the SAP S/4HANA Cloud 2302 release a new feature is now available: Business Role Groups. With this feature you can create business role groups and assign multiple business roles to them. This helps you to organize your area and easily search for all business roles of a certain category.

In this Blog Post I will show you how you can easily create a Business Role Group and assign it to your roles.

 

Prerequisites:

Ensure that you have the Business Catalog SAP_CORE_BC_IAM_GRP_PC assigned to your user. This Business Catalog is also added as default into the Business Role Template SAP_BR_ADMINISTRATOR.

Also, the following restriction types (in the following business catalogs) are required for maintaining business role groups and business user groups:

Business Catalogs	Restriction Types
SAP_CORE_BC_IAM_RM	Business Role (S_BRL)
SAP_CORE_BC_IAM_UM	Business User (CLASS)
SAP_CORE_BC_IAM_RA	Business Role (S_BRL) Business User (CLASS)
SAP_CORE_BC_IAM_RM_DISP_PC	Business Role (ROLE_GROUP)
SAP_CORE_BC_IAM_UM_DISP_PC	Business User (CLASS)

 

Creating a Business Role Group:

1. Go to “Maintain Business Role Groups” app and click on “Create” button
   


2. Choose the Group Description and click on “Create” button again
   *Please note that the name of business role group is created automatically in namespace ZCB.
   
   


3. The Business Role Group is now created

 

Assigning roles to a Business Role Group:

1. In the Maintain Business Role Groups app, click on the group that you want to add a role


2. Once the group details appear, click on “Add” button
   


3. A pop-up window will open with the Business Roles. Select the Business Roles that you want to add to the Business Group and click on “Add” button
   


4. Now the Business Roles were added to the Business Group.

Kindly note that it’s also possible to add a Business Role Group to a specific Business Role inside Maintain Business Roles app inside the Business Role details.

 

Removing roles of a Business Role Group:

1. In the Maintain Business Role Groups app, click on the group that you want to remove the role


2. Once the group details appear, select the Business Role that you want to remove and click on “Remove” button

 

Deleting a Business Role Group:

It’s only possible to delete a Business Role Group if it has no Business Role assigned to it. Ensure that you have removed all the Business Roles assignments before deleting a Business Role group.

 

For more details regarding this new functionality, please check the SAP Help Portal Documentation – Maintain Business Role Groups.

 

Hope this information is useful for you! I would greatly appreciate if you could share your feedbacks and thoughts in the comments.

Also, I encourage you to browse for other Community Topics that may be useful for you.

 

Best regards,

Tayane.

[former_member728975]

Great blog, Tayane!

[Daniel_Habrunne]

Hi Tayane,

 

thanks for this blog about the new feature to group Business Roles. Next logical step in S/4HANA Cloud would be to assign a Business Role Group to a User. How to approach this?

 

Best regards, Daniel

[patrik_buransky]

Hello,

is it possible to assign one business role to multiple business role groups?

Thanks,

Patrik

[Adiyaraja_AK]

Hi,

At the end, what is the use of this group, i really don't get it. 

Can we assign this role group to user ? No

And when you assign roles to user manually, there you can't even see this role group to filter.

Then why we need to group them?

[scottjs]

@Adiyaraja_AK 

We are looking at this group from compliance/controls perspective - each of our business roles have a business function that is responsible for it's assignment to users (i.e. functional owner has to approve any request from user to be assigned this role).

From perspective of holding records on ownership and responsibility, using the Business Role Group helps us maintain a shortlist of ownership functions to group these. Admittedly this can be done within naming convention of the roles themselves, but in some occasions this ownership may change over time, so having the Business Role Group concept allows us to capture this variation over time with internal reorganisations of structures/departments etc.

The fact that the Business Role Group can also be shown on download of business roles also assists in preparing periodic recertification exercises for internal controls; when looking to merge user-level data with role assignment data; this helps to prepare listings of relevant/specific info to the business functions to validate

[EricBrink]

Hi,

We have been looking into business user groups and business role groups in SAP Public Cloud. Both don't do what I would have expected of it. You should be able to define role group that has a logical grouping of roles. Then create a User Group for users needing this group of roles and link the two. 

Then all you need to do is assign a new user to a user group and he/she will get all the roles from the role groups assigned to the business user group.

Unfortunately this is not possible and you still have to assign individual roles to users. To make this less labor intensive you end up creating large roles, which is very rigid.

You can also not copy a role and make changes, nor copy a user with all roles assigned. 

Sofar this concept looks many steps backwards from what you can do in ECC role/user management and way more work.

Eric