Mass Creation of Fiori Roles in SAP S/4HANA

Organizations implementing SAP S/4HANA, whether through a greenfield or brownfield approach, often need to create multiple roles to provide access to Fiori catalogs and groups. SAP simplifies this process by offering automated programs for mass creation and updates of Fiori roles. One such program is PRGN_CREATE_FIORI_FRONTENDROLE.

Since this program does not have a dedicated transaction code, it must be executed using SE38 or SA38. The execution process is similar to running any SAP report: enter the program name and click the execute button.

Executing PRGN_CREATE_FIORI_FRONTENDROLE

1. Access the Program: Open transaction SE38 or SA38 and enter PRGN_CREATE_FIORI_FRONTENDROLE.

   

2. Choose Execution Mode: The program provides several options for role creation. The primary option for mass creation is Generation from Fiori Tile Catalogs.

   

3. Enter Selection Criteria:

   

   • Specify the Fiori Tile Catalog(s).

   • Add a role name prefix to align with naming conventions.

4. Review and Confirm:

   

   • The next screen displays the roles to be created based on the provided input.

   • Additional roles can be manually entered if needed.

5. Execute Role Creation:

   
   Click the execute button to create the roles.

6. Verify Role Creation:

   

   • If successful, the system displays a confirmation message.

   • The newly created roles can be checked in PFCG.

7. 

• 
  

Managing Authorizations

     

While the program automates role creation, authorizations must still be manually maintained within PFCG, similar to directly created roles.

Importing Role Data via Text File

The program also supports importing role data through a tab-delimited text file, making it easier to manage large datasets via Excel. The import file follows a specific format:

• CAT_PROVIDER rows represent Fiori catalogs.

• GROUP_PROVIDER rows represent Fiori groups.

Steps for Importing Roles:

1. Prepare the tab-delimited file in Excel.

2. Upload the file in PRGN_CREATE_FIORI_FRONTENDROLE.

3. Review the imported data in the preview screen.

4. Execute the role creation process.

Updating Existing Roles

In addition to creating new roles, PRGN_CREATE_FIORI_FRONTENDROLE also supports updating existing roles. The relevant options can be selected from the initial screen.

Backend Role Creation

For organizations using separate systems for Fiori frontend and backend, SAP provides another program, PRGN_CREATE_FIORI_BACKENDROLES. This program:

• Uses frontend roles as input.

• Creates corresponding backend roles without catalogs or groups but includes necessary services.

Conclusion

The PRGN_CREATE_FIORI_FRONTENDROLE program significantly reduces manual effort in Fiori role creation by automating bulk processing. Leveraging this tool, along with structured naming conventions and careful authorization management, ensures a streamlined and efficient role assignment process in SAP S/4HANA.