Creating Custom Roles

You can assign the delivered SAP Analytics Cloud standard application roles to your users. If they do not fit your business case, you can use them as a template for creating individual roles that meet your business needs.



  1. Go to Start of the navigation path() Main Menu Next navigation step  Security Next navigation step  RolesEnd of the navigation path.
  2. Decide which license type you want to base your new custom role on.
    The associated standard roles appear beside the license type, with any existing custom roles below them.
  3. Choose Create a New Role to add a new role for that license type.
  4. In the Create a New Role dialog, enter a unique name for the role, and select Create.
  5. Select a role template.
    The role templates are the predefined standard roles associated with that license type. After you select a template, the Permissions page appears, showing you the individual permissions defined for the role template you chose.
  6. Define the permissions for your new role for every activity – either for all objects of a business object type, or individually for every existing business object.
    For example, to define a user who is allowed to read all data change logs, select the check box in the Read column of the Data Change Log row. The permission is automatically passed on to all existing logs.

    To define that the user should be allowed to read only specific data change logs, expand the Data Change Log node, and then select the check box in the Read column only for specific log rows.

    For more information about permissions, see Permissions.

  7. If you want to change the role template that your new custom role will be based on, select (Select Template), and choose a role.
  8. If you have already created users that should be assigned the new role, choose Assign Users, select one or more users in the Assign Role To User dialog, and choose OK.
    All users that are currently assigned to the role appear in the Selected Users list along with any new users you select.
  9. Choose (Role Configuration) to define the following options:
    Use as Default Role The default role is assigned to new users if no role is specified when users are imported or created.
    Full Data Access
    If you activate this option, any user who is assigned this role can see all the data of any model regardless of how the data access for the model is defined.
    Enable Self-Service If you activate this option, any business user can request this role for himself in the Request Roles dialog.
  10. If you selected the Enable Self-Service option, decide which type of user should approve the role request:
    • Manager: The user assigned as a manager to the user requesting the role must approve the request.
    • Other User: A specific user that you select from the dialog must approve the request.
  11. Save your new custom role.