How to create Custom Role Collections for sap Cloud ALM

[SAPSupport]

Hi Team,

In "User Management" of SAP Cloud ALM, there is an option to assign the user custom roles. But a button to create a new custom role can be found nowhere.

Best regards,

------------------------------------------------------------------------------------------------------------------------------------------------
Learn more about the SAP Support user and program here.

[Venkat53]

Hi Ellie, Thanks for the comment, I've a query on the same I do not want to create the users in Cloud ALM manually and assign the roles, Instead I want to setup the role collections in BTP cockpit and assign the relevant roles required as per the requirement and map those role collections to the Groups in IAS, so when users access the Cloud ALM as per the Groups assigned to them in IAS they should be able to see the tiles which they supposed to see, is it possible with my requirement? And I see when accessed the cloud ALM link its creating the Shadow users in User management tab in cloud ALM, but the same thing we have in the BTP user management are those same?

[SAPSupport · Accepted solution]

Custom Role Collections can only be created on the SAP Business Technology Platform (BTP) cockpit.
After they are created on the BTP cockpit, they can be assigned to users for SAP Cloud ALM. 

Navigate to SAP BTP Cockpit with URL https://cockpit.btp.cloud.sap  and follow the steps below:

1. Select the Global Account for SAP Cloud ALM
2. Select the Subaccount of SAP Cloud ALM
3. Choose Security - Roles Collections in the navigation pane
4. Click on 'Create' button to create a custom role collection with a name
5. Edit this role collection
6. Select the necessary role collections under 'roles' tab to add it into this custom role collection
7. Save

Please review KBA 3523047 for more details.

3523047 - How to create Custom Role Collections in SAP Cloud ALM

Best regards,
Ellie 

[Venkat53 · Accepted solution]

Hi Ellie,
Thanks for the comment, I've a query on the same I do not want to create the users in Cloud ALM manually and assign the roles, Instead I want to setup the role collections in BTP cockpit and assign the relevant roles required as per the requirement and map those role collections to the Groups in IAS, so when users access the Cloud ALM as per the Groups assigned to them in IAS they should be able to see the tiles which they supposed to see, is it possible with my requirement? And I see when accessed the cloud ALM link its creating the Shadow users in User management tab in cloud ALM, but the same thing we have in the BTP user management as well where if I access the cloud ALM Link we have the shadow users get created the CLOUD ALM Subaccount, what makes the difference in creating the shadow users in CLOUD ALM and subaccount of Cloud ALM?