When planning an authorization concept for your SAP S/4HANA Cloud Public Edition implementation, what rules must you consider? Note: There are 2 correct answers to this question.

Question

Options

• ABusiness catalogs can be assigned directly to a business user.
• BBusiness roles can be assigned directly to a business user.
• CSAP Fiori apps, dashboards, and displays can be assigned directly to a business role.
• DBusiness catalogs can be assigned directly to a business role.

• A
  4% (1)
• B
  93% (26)
• C
  4% (1)

Explanation

In SAP S/4HANA Cloud Public Edition, the authorization model follows a strict hierarchy: Fiori apps → Business Catalogs → Business Roles → Business Users. Business roles are assigned directly to business users (B), and business catalogs are the building blocks assigned directly to business roles (D) - these are the two valid assignment points in the hierarchy.

Why A is wrong: Business catalogs cannot skip a level and be assigned directly to a business user - they must first be bundled into a business role.

Why C is wrong: Individual SAP Fiori apps, dashboards, and displays are not assigned directly to a business role; they live inside business catalogs, which are then assigned to the role.

Memory tip: Think of it as a three-layer sandwich - Apps are the ingredients, Catalogs are the slices of bread, Roles are the sandwich, and Users get the sandwich. You can only hand a user the whole sandwich (role), not loose ingredients (apps) or bread alone (catalog).

No community discussion yet for this question.