cancel
Showing results for 
Search instead for 
Did you mean: 

How to Connect Business User Group to Business Role group?

PhilippPrestel
Explorer
0 Kudos

Hello dear SAP Community, 

In s4 Hana public cloud i can creat Business User Group and Business Role Group. It would make a lot of Sense to Assign these Groups to each other, to minimize Administration work. 

So my Question is: Is it Possible to Assign a Bussines User group to a Business Role Group?

Context:  Solved: Is it possible to restrict which Business Role is ... - SAP Community

This functionality is the Maintain Business User Groups and Maintain Businsess Role Groups.

With Maintain Business User Groups app you can create business user groups and assign multiple business users to them. This helps you to organize your area and easily search for all business users of a certain category (for example to assign them to business roles). Grouping also facilitates maintenance of authorizations. If you are the super administrator for all areas, you can delegate this task to administrators for the relevant areas, such as Financials. In this case, you would create a business user group for Financials.

With Maintain Business Roles Groups app you can create business role groups and assign multiple business roles to them. This helps you to organize your area and easily search for all business roles of a certain category (for example to assign business users to them). Grouping also facilitates maintenance of authorizations. If you are the super administrator for all areas, you can delegate this task to administrators for the relevant areas, such as Financials. In this case, you would create a business role group for Financials and allow to assign these business roles only to particular user groups. 

 

For more information, you can check the following documentations:

SAP Blog Post | How to use the Maintain Business User Groups functionality

SAP Blog Post | How to use the Maintain Business Role Groups functionality

 

View Entire Topic

Dear Philipp,

as you describe, it's currently not possible to assign all Business Users included in a Business User Group directly to all Business Roles included in a Business Role Group.

This is a feature that is considered for a future improvement. 

But: this would be a feature that is very powerful and must be used with caution. It is usually not recommended to assign many Business Roles to a single Business User. You lose oversight who is allowed to do what and which functionality and authorization comes from which Business Role, especially when maintaining the same restriction types the one way in one role and in another way in another one. The underlying authorizations are always being accumulated on user level! 

What you can do today: preselect a list of Business Users or Business Roles via their group assignment and start mass processing from there.
For that launch the Maintain Business Users / Maintain Business Roles app.
Add Business User Group / Business Role Group to the filters.
Search for the desired group.
In the results list mark all objects you want to adjust and start Mass Change.
In the Mass Change dialog when it comes to selecting the "other" objects (Users/Roles) you can search for them individually (maybe you have a good naming convention for roles), but you can also paste multiple objects from the clipboard (e.g. you copied them from a spreadsheet or document) using the following button on the popup screen:

christian_hochwarth_1-1716975648269.png

 

Best regards,
Christian Hochwarth