The 'Maintain Business Roles' SAP Fiori app is a central tool for identity and access management in SAP S/4HANA Cloud. Its primary purpose is to define the scope of access for a specific business user. This is achieved by first assigning relevant business catalogs, which are collections of apps and UIs for a particular functional area. After assigning catalogs, administrators must define restrictions (authorization values) for the access categories within those catalogs, such as limiting access to specific company codes, plants, or cost centers. The system then automatically generates the underlying technical authorizations (PFCG profiles) based on these configurations.

C. Maintain technical catalogs: Technical catalogs are SAP-delivered content and are not maintained via the 'Maintain Business Roles' app. This app consumes business catalogs, which are based on technical catalogs.

D. Assign PFCG profiles to a business role: The 'Maintain Business Roles' app abstracts the underlying technical layer. PFCG profiles are automatically generated by the system based on the assigned catalogs and restrictions, not manually assigned.

1. SAP Help Portal

SAP S/4HANA Cloud: Document "How to Maintain a Business Role".

Section: Procedure

Step 4: "On the Assigned Business Catalogs tab

you can add business catalogs to your business role." (Supports Answer A).

Section: Procedure

Step 5: "You can maintain the access restrictions for each business catalog that you have assigned to the business role... You can define the access by setting the read

write

and value help access to Unrestricted

No Access

or Restricted." (Supports Answer B).

2. SAP Learning Hub: Course S4C01 - "Implement and Run SAP S/4HANA Cloud

public edition".

Unit: Identity and Access Management

Lesson: Maintaining Business Roles: This lesson details the process within the 'Maintain Business Roles' app

explicitly showing the steps of assigning business catalogs and then defining restrictions for authorization fields. It clarifies that technical artifacts like PFCG roles are generated from this business-level definition. (Supports Answers A and B; refutes D).

3. SAP Help Portal

SAP S/4HANA Cloud: Document "Business Catalogs".

Section: Business Catalogs vs. Technical Catalogs: "Technical catalogs are delivered by SAP. You cannot change them... You use the Maintain Business Roles app to assign business catalogs to business roles." This clearly separates the maintenance of technical catalogs from the activities performed in the 'Maintain Business Roles' app. (Refutes Answer C).