In our last blog post on the topic of Fiori and its individual elements, you received some important initial information. In this article, we will show you a concrete example of how to implement Fiori authorizations in practice.
Step 1: Roll construction in the PFCG
Let’s start in the SAP GUI with transaction PFCG, where you build the role and fill it with transactions, define the authorization objects and generate the role. You assign the name using the naming convention and add a description of the purpose for which the role was created.
Step 2: Create transport
You can create the shipment directly in the PFCG using the truck symbol or use transaction SE01. You need the customizing request not only to distribute the role to the downstream systems, but also to create the business catalog. The Fiori authorizations are controlled via this catalog.
Step 3: Creating the business catalog & checking the transport
You create the Business Catalog – like all other Fiori elements – in the Launchpad (browser instead of SAP GUI). First click on the “Launchpad Content Manager” app in the Fiori Launchpad.
The tile then opens and you can now create the business catalog using the “Create” button. Finally, confirm with “Next”.
By confirming, another window appears in which you must enter your transport order. Finally, confirm with the green arrow.
You can now see and select your newly created business catalog in the Content Manager selection.
Step 4: Filling the business catalog with the desired Fiori apps
In the lower area, you can now add the tiles/target assignments to the business catalog. This also works via the “Add tiles/target assignment” button.
Clicking on this button opens the following window, where you can assign your apps to the business catalog. You can search for the title of the app, the Fiori ID and even the semantic object and/or the action in the search bar.
Please note: An app may be displayed more than once. This is because it may be installed in several technical catalogs. In this step, you are only referencing the app from one tech catalog in your business catalog. So make sure that you select the app from the correct tech catalog. You can see the source catalog if you scroll further to the right in the overview in the search window.
Ist dies erfolgreich geschehen, können Sie nun im Auswahl-Menü des Fiori Launchpad Content Manager Ihren Business Katalog mit den neu zugeordneten Elementen sehen.
Step 5: Creating the spaces and supplying fiori content
The Spaces are now created with the associated content.
You start again in the Fiori Launchpad and click on the tile
“Manage launchpad areas” tile.
After clicking, the following window opens, where you can create your Spaces and the associated Pages by clicking the “Create” button. Check the “Create an additional page” box so that the page is created in the same way as the Space. You will need the page to arrange your apps as you want them to be displayed to the user in the Launchpad.
The Space and Page are then created and linked.
Step 6: Link role with business catalog and space
To establish the connection between the role and the catalog and the Space, use the PFCG. Open the role in the “Menu” tab.
If the link was successful, this can also be seen in the role menu.
With the business catalogs, new authorization objects are usually added to the role. You have to define and generate these anew.
Once this has been done, you can also see the link between the role and the business catalog in the “Manage Launchpad pages” app in the Fiori Launchpad.
Step 7: Adding the fiori apps from the business catalog to the page
The last step is to integrate the apps from the Business catalog into the page that is assigned to your Space.
This works via the “Manage Launchpad pages” app. Call up your page and select the “Page content” tab. You will currently see a message that the page is empty. So there are no apps here yet. You need to add them now.
Good to know: Each page is divided into sections that contain the apps. You can create several sections – the titles act like subheadings in the Launchpad. Or you can put all apps in a single section.
In our example, we only use one section and now fill it with the apps from the previously created business catalog. To do this, click on the “Edit” button in the page.
A menu with two tabs appears on the right. Select the “Derived from roles” tab. Only the apps from the roles that are linked to this page (via the Space) are displayed here. You will therefore only see the apps from your own business catalog here, because this is in your role.
Good to know: The “Manually selected” tab allows you to access all apps in the system – regardless of whether the catalog they come from is already installed in roles or not.
You can drag and drop the apps individually into the section or click “Add”.
Step 8: Assign role to user
So that the user can finally see the arrangement of the newly created Spaces, Pages and Sections in their Launchpad, you still need to assign the role to the user. To do this, go back to the SAP GUI and use either the transactions PFCG or SU01 if no Identity Management is in use.
The next time the user opens their Launchpad, they will see the app as desired under the “Manage bookings” tab (space).
Good to know: The user may have to log in to the system again before the changes are visible.
