Creation of custom roles for Cloud ALM (eg. restrict Transport creation, restrict feature creation)

[luigi_co]

In Cloud ALM, is there a way to mix and match authorization so that we can create our own roles? There is a SAP note about the creation of custom role collections and roles, but there is no specific information on how to create the role in Cloud ALM perspective.

For example, if we want to restrict creation of Features, creation of Transports, or creation of Transport of copies, how can this be achieved, or can this be achieved? Or are we just limited on the SAP standard roles provided?

regards,

Luigi

#sapcloudalm #calm #cloudalm

[john_p_grimes · Accepted solution]

Hi Luigi,

KBA 3499177 has information about the pre-built role collections s available for Implementation functionality in SAP Cloud ALM.

You can examine the role collections in the BTP cockpit to find the individual role objects assigned to them. However, you'll quickly find that most of the Project and Feature related role collections have single role objects. Here's an example, the "Project Member" role collection just has one role object assigned to it, which is responsible for all of its permissions.

Because the role collection permissions are governed by single role objects, this means that the permission control is not granular. There is currently no way to separate the predetermined responsibilities and permissions for the "project member" and then create a custom "project member" role collection with only a subset of those responsibilities and permissions. So custom SAP Cloud ALM roles for Implementation are only "additive", not "subtractive".

Thanks and regards, 
John