Creating Role Collections

Prerequisites

You are the administrator for the subaccount.

Context

Role Collections group different roles that can be applied to the application users.

Procedure

  1. In the SAP BTP cockpit, navigate to your subaccount.
  2. In the navigation area, choose Start of the navigation pathSecurity Next navigation step Role CollectionsEnd of the navigation path.

    The list with the role collections is displayed.

  3. Choose New Role Collection.

    The New Role Collection dialog box is displayed.

  4. In the dialog box, enter a name for the role collection and a logical description.

    The new role collection is created and added to the list.

  5. From the list, choose the role collection.

    The list with the roles that are included in the role collection is displayed.

  6. To add a role to the role collection, choose Add Role.

    The Add Role dialog box is displayed.

  7. In the dialog box, select the role, the role template and the application identifier. You can also select the application identifier first and then choose from the respective roles that are available in this identifier.

    The tables below list the application identifier, role templates, and roles for specific solution.

    Application Identifier and relevant details for SAP Asset Intelligence Network
    Application Identifier Role Template Role Description

    For production, the application identifier will be in the format : ain_broker_live!bxxx

    For development and test, the application identifier will be in the format : ain_broker_preview!bxxx

    AIN_ORG_DATA_EXPERT AIN_ORG_DATA_EXPERT This is the role template and role for SAP Asset Intelligence Network. For more information about role templates and roles, see Roles for SAP Intelligent Asset Management FLP.
    AIN_ORG_DATA_READ AIN_ORG_DATA_READ

    For production the application identifier will be in the format : ac_broker_live!bxxxx

    For development and test, the application identifier will be in the format : ac_broker_preview!bxxx

    AC_ORG_DATA_EXPERT   This is the role template and role for the SAP Asset Intelligence Network. You will find relevant information for the SAP Asset Intelligence Network included in the roles topic that is linked above.
    AC_ORG_DATA_READ  
    AC_CUSTOMER_ADMIN  
    portal-cf-service!b3664 Theme_Admin Theme_Admin These roles are provided by the portal service and the UI Theme Designer service. The roles are required to work with the Theme Manager in the SAP Fiori launchpad. For more information, see Creating Custom Themes.
    sap-theming!b6529 Editor Editor
    Application Identifier and relevant details for SAP Asset Strategy and Performance Management
    Application Identifier Role Template Role Description

    For production, the application identifier will be in the format : aspm_broker_live!bxxxx

    For development and test, the application identifier will be in the format : aspm_broker_preview!bxxx

    ASPM_ORG_DATA_EXPERT ASPM_ORG_DATA_EXPERT This is the role template and role for SAP Asset Strategy and Performance Management. For more information about role templates and roles, see Roles for SAP Intelligent Asset Management FLP.
    ASPM_ORG_DATA_READ ASPM_ORG_DATA_READ

    For production, the application identifier will be in the format : ac_broker_live!bxxxx

    For development and test, the application identifier will be in the format : ac_broker_preview!bxxx

    AC_ORG_DATA_EXPERT   This is the role template and role for the asset central foundation. You will find relevant information for the asset central foundation included in the roles topic that is linked above.
    AC_ORG_DATA_READ  
    AC_CUSTOMER_ADMIN  
    portal-cf-service!b3664 Theme_Admin Theme_Admin These roles are provided by the portal service and the UI Theme Designer service. The roles are required to work with the Theme Manager in the SAP Fiori launchpad. For more information, see Creating Custom Themes.
    sap-theming!b6529 Editor Editor
    Application Identifier and relevant details for SAP Predictive Asset Insights
    Application Identifier Role Template Role Description
    pdms_broker_live!b428     These are the application identifiers for SAP Predictive Asset Insights. For information about role templates and roles, see Roles and Role Collections.
    fma_broker_mle-live!b428    
    hic_broker_mle-live!b428    

    For production, the application identifier will be in the format : ac_broker_live!bxxxx

    For development and test, the application identifier will be in the format : ac_broker_preview!bxxx

    AC_ORG_DATA_EXPERT   This is the role template and role for the asset central foundation. You will find relevant information for the asset central foundation included in the roles topic that is linked above.
    AC_ORG_DATA_READ  
    AC_CUSTOMER_ADMIN  
    portal-cf-service!b3664 Theme_Admin Theme_Admin These roles are provided by the portal service and the UI Theme Designer service. The roles are required to work with the Theme Manager in the SAP Fiori launchpad. For more information, see Creating Custom Themes.
    sap-theming!b6529 Editor Editor
  8. Choose Add.

    The role is added to the role collection.

  9. Repeat the steps above for all roles that need to be added to the role collection and all role collections that need to be created.

Results

The role collections are created.