In SAP S/4HANA Cloud, private edition, authorizations are managed through roles assigned to user master records. This approach streamlines permission management and ensures users have appropriate access rights.
Authorizations in SAP S/4HANA Cloud Private Edition control user access to apps and functions, managed via a role-based approach. Let's evaluate:
* A. The authorization is associated with a role that has to be assigned to the user master record:
This is correct. In SAP S/4HANA Cloud Private Edition, authorizations are bundled into business roles (created in the "Maintain Business Roles" app), which are then assigned to user master records via the
"Maintain Business Users" Fiori app. This links the user to the role's permissions.
* B. The user has to be assigned to the authorization profile in SAP IMG: This is incorrect.
Authorization profiles are a legacy concept from on-premise systems (e.g., via PFCG in SAP GUI), not the primary method in Private Edition, which uses Fiori-based role management instead of direct IMG assignments.
* C. The user has to be assigned to a user group that contains a role profile including the authorization: This is incorrect. User groups in SAP S/4HANA are for organizational purposes (e.g., reporting), not for assigning authorizations-roles are assigned directly to users, not via groups.
* D. The authorization has to be assigned to both the user master record and the role profile: This is incorrect. Authorizations are not assigned directly to user master records; they are embedded in roles, which are then linked to users. Dual assignment is not required.
In summary, authorizations are assignedA(The authorization is associated with a role that has to be assigned to the user master record).
References:
* SAP Learning: "User and Authorization Management in SAP S/4HANA Cloud Private Edition" (learning.sap.com)
* SAP Help Portal: "Role-Based Authorization in SAP S/4HANA" (help.sap.com)
* SAP Official Site: "SAP S/4HANA Cloud Private Edition - Security" (www.sap.com)