Business Roles in SAP Fiori and SAP S/4HANA Cloud

Keep this: job aid

Fiori business role card

• Four layers: space/page layout, business catalog, start authorization, back-end checks.
• Start from the closest SAP_BR_* template or Public Edition template; copy, never edit SAP's.
• Catalogs are all-or-nothing: build a custom catalog when only part of an SAP one fits.
• Restrict data: organizational levels and derived roles (private), restriction types and access categories (public).
• Write starts at no access; Unrestricted needs a written business reason.
• Assign the space to the role, then build the page in the role context; set it visible.
• Hiding a tile is not a control; remove the catalog and check other roles.
• Test with users holding only the planned roles: see it, launch it, save it, get refused outside scope.
• After every upgrade: SU25 and menu comparison (private) or the role changes app (public), then retest changed roles.