When you have subscribed to SAP Cloud Identity Access Governance service in a subaccount, the predefined role collections for the solution are deployed to the subaccount as well. These can be viewed and managed in the subaccount under the navigation menu, Security→Role Collections. Role collections must be eventually assigned to users to enable them to work with different services, like Access Request service, Role Designer service, and so on.
Note
SAP BTP differentiates between platform users and business users. Platform users are those users who execute administrative tasks using the SAP BTP cockpit. Business users work with the application that is deployed on SAP BTP. They do not work with the SAP BTP cockpit.
In terms of SAP Cloud Identity Access Governance, platform users are security administrators in the subaccount. They are responsible for adding and managing other administrators, configuring the trust connection to custom identity providers, and creating and assigning role collections to users. Business users are users who work with the apps in SAP Cloud Identity Access Governance Fiori launchpad.
