cancel
Showing results for 
Search instead for 
Did you mean: 
Read only

Timeouts When Maintaining Large Business Roles in S/4HANA Public Cloud (3SL – CBC)

Mike_vanIngen
Explorer
0 Likes
252

Dear SAP Community,

In our S/4HANA Public Cloud 3SL (CBC) Development and Test tenants, we are experiencing persistent issues when maintaining a large business role that includes all available business catalogs (currently more than 1,400).

Whenever we try to update an existing super-user role that already contains approximately 1,000 catalogs, or when we attempt to create a new role containing all catalogs through the “Maintain Business Roles” Fiori app, we receive TimeOut or RunTime errors.

We use this wide-access role for key users to quickly determine whether issues raised by stakeholders—such as after activating new scope items or after upgrades—are related to missing authorizations.

I would appreciate hearing from anyone who has encountered similar challenges. How did you resolve or work around these performance limitations?

Additionally, is there a way to build such a role using the “Create From Template” option instead of manually adding each catalog through the UI? If so, where can the template be found and which fields are required for a successful upload?

Thank you in advance for your insights.

Kind regards,
Mike van Ingen

Accepted Solutions (1)

Accepted Solutions (1)

dawid90
Active Participant
0 Likes

Dear @Mike_vanIngen,

  • The timeouts you’re seeing are a known limitation when a single business role contains a very large number of business catalogs. SAP’s official guidance is to split the mega-role into several smaller roles and avoid editing roles with 1000+ catalogs.

Please check SAP Note below:

https://userapps.support.sap.com/sap/support/knowledge/en/3648696

 

  • Create From Template”doesn’t accept a user-defined upload file. It’s only for SAP-delivered Business Role Templates (you pick a template in the app and the system copies its catalogs/restrictions). If you want to reuse a role you built, use Download/Upload Business Roles (XML) or transport it via Software Collections not Create From Template.

More details below:

https://help.sap.com/docs/SAP_S4HANA_CLOUD/53e36b5493804bcdb3f6f14de8b487dd/8980ad05330b4585ab96a8e0...

https://help.sap.com/docs/SAP_S4HANA_CLOUD/53e36b5493804bcdb3f6f14de8b487dd/a58f69585339484aa204cf03...

https://help.sap.com/docs/SAP_S4HANA_CLOUD/53e36b5493804bcdb3f6f14de8b487dd/83c1cd62666f48c68d93f2fd...

My suggestion and practical workarounds:

  • Replace the single super-role with a “bundle” of smaller roles Break catalogs by LoB (e.g., Finance, MM, SD, WM, Analytics), by scope item groups, or by technology (GUI/Fiori) depending on how you troubleshoot.
  • Use tooling to find missing authorizations instead of blanket access Display Authorization Trace app activate a trace for the affected business user, have them reproduce the issue, then review failed checks and fix just the needed catalogs/restrictions.

https://help.sap.com/docs/SAP_S4HANA_CLOUD/53e36b5493804bcdb3f6f14de8b487dd/79b3c9b7701248fe83b81d4b...

  • IAM Information System + Business Catalogs: look up an app → see its required business catalogs and scope-item ties, then adjust roles precisely. This is SAP’s recommended route after upgrades when tiles “disappear”. More details in SAP Note’s:

https://userapps.support.sap.com/sap/support/knowledge/en/2602149

https://userapps.support.sap.com/sap/support/knowledge/en/3462922

  • SAP’s own guidance after upgrades: review and adapt business roles rather than grant everything. More details on SAP Community:

https://community.sap.com/t5/enterprise-resource-planning-blog-posts-by-sap/review-and-adapt-busines...

Best Regards,

Dawid

Answers (0)