How to set up authorization for Fiori unique apps

[leokan785]

Hi Experts,

I want to know how to set authorization of "organization / activity" using Tr-Cd: PFCG for functions that are unique to Fiori.

For example, I tried to set the activity of the app "Bank Account Management" using Tr-Cd: PFCG, However, the Authorization Class/Object of the App were not auto suggested by PFCG.

This app is a Fiori only transaction, not in the GUI.

And, I know that authorization objects are auto proposed for transactions that exist in both the GUI and Fiori (ex) FB01-03, VA01-05).

From this result, I think that other Fiori unique apps have no ways to set authorization of organization / activity too.

Is there a good way to do it? Please could some one help me.

[Colleen]

HI Kanoka

PFCG proposals are based on transaction code SU24 mappings for items in the role menu

Fiori Apps (SAPUI5) will have OData Services automatically added to the PFCG menu (IWSG and IWSV services). Default proposals are can be maintained against these technical services in SU24 to also default the proposals.

You need to see what the OData Service is. For SAP standard applications, Fiori Apps library can help provide that information. If not, run STAUTRACE and you will see the S_SERVICE authorisation checks for the OData Service.

Regards

Colleen

[leokan785]

Dear Colleen,

Thank u for your reply.

So should I set the permissions by following the steps below?

① Check the Odata service required for the app with Fiori Apps LIb

② Search for the service of ① with SU24

③ Confirm the authority object to be proposed with SU24

④ Set authority with PFCG Does this solve the problem?

However, this is very inconvenient...

Best Regards,

Kanoko

[Colleen]

sorry, I just saw your comment

The core modules appear to have pretty good setup of SU24 proposals - possibly the Bank App didn't have them in place.

If you are doing a mass build, you can view all mappings via SAP tables (USOBT_C and USOBX_C). You can use USOBHASH table to find mapping of technical service name to S_SERVICE GUID value that the SU24 is stored against