How to assign Users as Approver and Requester in SAP Build Process Automation

[ayechan]

Hi Everyone,

I am now creating Approval Form using SAP Build Process Automation.

1. And I am confusing how can I assign users as Approver and Requester Roles.

2. And how can I give administrator role to user also?

Could you please give me advice about these questions?

And if you have any related documentation, cloud you please share with me?

Thank you.

Best Regards,

Aye Chan

[Dan_Wroblewski]

Also see https://help.sap.com/docs/build-process-automation/sap-build-process-automation/authorizations

[Dan_Wroblewski]

OK, now I'm further confused. 

• Why does each user needs his/her own subaccount?
• A user does not really belong o a subaccoun, hey belong to an IDP that defines a set of users. Each subaccount can form a trust with an IDP and then recognize those users within that subaccount. 
• You said you created a BTP account for each user. You mean a BTP global account, nit just subaccount?
• And it doesn't make sense to me that users would have multiple Inboxes.

I think we need to clarify the landscape you want to have -- IDPs, global accounts, subaccounts, users.

I imagine there are scenarios of federation, like a company with BTP buys a subsidiary with a different BTP and there is a need to unify things, but I'm not an expert there. 

@beapasch-- maybe you can help or refer his to someone  

[ayechan]

Hi @Dan_Wroblewski,

I created one user for one global account and one subaccount.

So, I have now 2 users, 2 global accounts and 2 subaccounts.

Because in our approval system, there can be many approvers and each approver wants to login to the system with their own email.

So, I think, each approver user has each own inbox separately.

And I am not sure that this requirement can be done by using only one BTP account.

Can we let the approver users login and use Inbox of SAP Build by using their own emails if we created many subaccount in only one BTP account?

If we can, how can I proceed to get like this. I mean that creating many subaccounts by using many emails in just one BTP account?

Could you please provide the information about it?

Thank you.

Best Regards,

Aye Chan

[Dan_Wroblewski]

Why did you do all this? Are you working with others on this project? Did someone tell you that you need a landscape like this?

[Dan_Wroblewski]

Unless you have a specific landscape in mind, you do the following: (1) 1 global account and 1 subaccount; (2) Create users in your custom IDP and make sure they are listed as users in your subaccount (and make sure your IDP is trusted by your subaccount); (3) Use Process Automation. You will have one component that is Inbox but everyone will open it and see their items.

[ayechan]

Hi @Dan_Wroblewski,

Actually, I am now checking by myself how can I able to achieve the requirement (using many approvers) that I mentioned above.

So, I though that I will need to create like that and created them.

And during checking, I am confusing that I am doing the right thing or not.

So, I decided to ask a question in community.

And if so, I would like to confirm that I will need to create users for approver in that Security > Users of BTP account?

And is it possible to show/hide the approval form request based on the login users in Inbox of sap build since they shared one Inbox?

Because since the workflow I would like to create have multiple approval steps like (HR can approve after Manager have done approving and only show to HR user at that time Manager have done approving).