Setting up Roles and Onboarding Users

Describes the process of creating roles from role collections, creating users, and assigning users to user groups.

Step	Step Description	More Information	Where
1	Since, SAP Asset Strategy and Performance Management uses the authentication mechanisms provided with the SAP Cloud Platform make yourself familiar with the documentation.	Authorization and Trust Management in the Cloud Foundry Environment	SAP Cloud Platform Cockpit
2	In order, to use the SAP Asset Strategy and Performance Management you have to create role collections by using the standard role templates available. Note See Roles and SAP Help Portal Application Help Administration Configuration Tasks Roles.	Maintain Role Collections	SAP Cloud Platform Cockpit
3	Establish trust with SAML 2.0 identity providers	Trust and Federation with SAML 2.0 Identity Providers	SAP Cloud Platform
4	Create a user group. Follow the steps described in the link under More Information. Note The user group must have the same name as the role collection ID. Note When you create your user groups, consider the authorization scenarios for the types of users using SAP Asset Strategy and Performance Management. For example: Business users - for access to master data (display access), and processes. Configuration users - to edit master data and carry out administrative tasks	Create a New User Group	SAP Cloud Platform Identity Authentication Administration Console
5	Map role collections to user groups. Follow the steps described in the link under More Information.	Map Role Collections to SAML 2.0 User Groups	SAP Cloud Platform Cockpit
6	Create users. Follow the steps described in the link under More Information. Note For mass maintenance of users, see Import or Update Users for a Specific Application Note For details on user management, see User Management	Create a New User	SAP Cloud Platform Identity Authentication Administration Console
7	Assign user groups to the users as required by their role in the SAP Asset Strategy and Performance Management application.	Assign User Groups to a User	SAP Cloud Platform Identity Authentication Administration Console