Show TOC

Assign Tile Catalogs to RolesLocate this document in the navigation structure

To make tile catalogs available to end users, you create a new menu entry for the tile catalog in the PFCG role menu and determine which authorizations are required to run the applications.


  • You have installed one of the following:
    • SAP_BASIS NW 7.40 SP07 with SAP Note 2031538 Information published on SAP site

    • SAP_BASIS NW 7.40 SP011 or higher

    • SAP_BASIS NW 7.50

  • If you want to read authorization defaults for SAP NetWeaver Gateway OData services, the following prerequisites must be met in addition:
    • If no descriptor for applications is available in your system:

      You have software component SAPUIFT 100 installed and downloaded the App Activation user interface.

      See published on SAP site Start of the navigation path Download Software Next navigation step Installations & Upgrades Next navigation step A - Z Index  Next navigation step F Next navigation step SAP Fiori Next navigation step SAP Fiori app implementation foundation End of the navigation path.

      Using the App Activation user interface, you download the implementation information from the SAP Fiori Reference Library. This file contains the OData services required to run SAP Fiori apps.

    • If the descriptor for applications is available in your system:

      You have installed SAP Note 2197125 Information published on SAP site.

      For more information on the descriptor for applications, see Descriptor for Applications, Components, and Libraries.


  1. In Role Maintenance (transaction PFCG), provide the role name and choose Change.

    If no role exists, create a role by choosing Create Single Role.

    All users with this role are granted access to the catalog assigned to the role.

  2. Choose the Menu tab.
  3. Choose Insert Node and select SAP Fiori Tile Catalog.
  4. In the dialog box that appears, select Fiori Launchpad Catalogs as catalog provider.
  5. Depending on your scenario, proceed as follows:
    • To maintain roles on the front-end server, select the Local Front-End Server radio button.
    • To maintain roles on the back-end system:
      • Select the Remote Front-End Server radio button.

      • Provide one of the following to establish a connection to the front-end server:

        • RFC variable

        • RFC destination

      • Provide your logon data for the front-end system.
  6. Enter a catalog ID.

    The catalog ID is the name that you provided when creating the catalog in the launchpad designer connected to the front-end server.

    You can use the value help for this.

  7. Make sure the Include Applications checkbox is marked.
  8. Confirm your selection.


The tile catalog you assigned to the role is available in the role menu. In the Role Menu tree, authorization defaults for applications used in the catalog are listed as nodes under the catalog.

Authorization defaults for the following application types are retrieved, given they are located in the system used for role maintenance:
  • SAP NetWeaver Gateway OData services used in SAPUI5 applications

  • Web Dynpro ABAP applications

  • SAP GUI transactions


If an application used in the assigned catalog is not available in the ABAP system when an administrator determines authorization defaults, a message is written to the application log.

For more information, see Message Logging for Launchpad and Launchpad Designer.

In the Details view of the node, you can change and display the node.

You can view the content of a Fiori Launchpad Catalog in the SAP Fiori launchpad designer by choosing Execute from the context menu of the tile catalog in the role menu.

To make sure the catalogs linked to the role are visible for the end user, the Hide Menu from NWBC checkbox in the Menu Options dialog box should not be selected.

Next Steps

You use the default authorization entries to maintain authorization data and generate a profile for the role.