Activating SAP Fiori Apps by SAP Business Roles

Objective

After completing this lesson, you will be able to activate SAP Fiori Apps by SAP Business Roles

Task List SAP_FIORI_CONTENT_ACTIVATION

Screenshot of Task List SAP_FIORI_CONTENT_ACTIVATION

Use this task list for the automatic activation of FLP content delivered by SAP using SAP Fiori catalogs and business roles.

The purpose of task list SAP_FIORI_CONTENT_ACTIVATION is:

  • Activates all SAP Fiori apps (including SAP Gateway services and ICF nodes) based on selected SAP Fiori business roles
  • Generates working template roles including authorization profiles
  • Optional: Generates test users (one user per role)

Caution

Apply the latest version of SAP Note 2686456 before executing task list SAP_FIORI_CONTENT_ACTIVATION.

Selected tasks from task list SAP_FIORI_CONTENT_ACTIVATION are explained in the following sections in more detail.

Screenshot from system with labels: Task: Select SAP Business Roles for FLP Content Activation

For task Select/Confirm SAP Business Roles for FLP content activation, you can select SAP business roles for FLP content activation. Only SAP roles in namespace SAP_BR* are available for selection.

Note

If you select larger numbers of business roles, start the task list in background mode. Do not select more than 100 business roles in one task list run.

Certain business roles have special prerequisites which could lead to task list dumps, especially if the business functionality needs to be activated by a business function switch. Select only those roles where the prerequisites are met and which fit the intended usage/scoping of the SAP S/4HANA system.

Certain roles can not be activated due to technical restrictions or require additional activities.

Screenshot of the system with labels: Task: Create Users with Generated Business Roles

Using the optional task, Create Users with generated Business Roles (SU01), you can trigger the creation of test users.

The test users follow the naming convention <P><INDEX>_<AA><BB><CC> with

  • <P>: Prefix
  • <INDEX>: position of the role entry in the selection table
  • <AA><BB><CC>: derived from the role name <AA*>_<BB*>_<CC*>

Example:

  • <P> = T
  • <INDEX> = 142
  • <AA><BB><CC>: role name = SAP_BR_AP_MANAGER_AU

In this case, the test user ID would be T142_APMAAU.

You can specify an additional role that will be assigned to all test users.

Activate SAP Fiori Apps by SAP Business Roles using Task List SAP_FIORI_CONTENT_ACTIVATION

Business Example

In this exercise, you will perform the required steps to prepare SAP Fiori apps.

Note

In this exercise, when an object name or value contains ##, replace ## with the number your trainer assigned to you.

Task 1: Ensure an Up-to-Date UI2 Page Building Service Cache

Steps

  1. To ensure that task list SAP_FIORI_CONTENT_ACTIVATION is operating on an up-to-date UI2 page building service cache, start the SAP Fiori launchpad content manager (transaction /UI2/FLPCM_CUST).

    1. Log on to your SAP system using the train-## user.

    2. Enter transaction /UI2/FLPCM_CUST.

    3. Proceed with the next task regardless of any "Content is being updated. Restart the transaction in a few minutes." message.

      Note

      Starting the SAP Fiori launchpad content manager will trigger an update of the UI2 page building service cache if necessary.

Task 2: Analyze Task List SAP_FIORI_CONTENT_ACTIVATION

Steps

  1. In your SAP S/4HANA system, generate a task run for task list SAP_FIORI_CONTENT_ACTIVATION (transaction STC01).

    Caution

    Do not execute the task list yet!
    1. Continue working in your SAP system using the train-## user.

    2. Enter transaction STC01.

    3. In the Task List field, select SAP_FIORI_CONTENT_ACTIVATION and choose Generate Task List Run (F8).

    4. Do not execute this task list yet, but keep this SAP GUI window open.

  2. Read the help for task Activate OData Services (/IWFND/MAINT_SERVICE). In a new SAP GUI window, use the ExportSpreadsheet function of transaction /IWFND/MAINT_SERVICE to analyze the number of SAP Gateway services that are currently registered.

    1. Choose the Help icon for the task with the description Activate OData Services (/IWFND/MAINT_SERVICE).

    2. According to the help, this task activates the determined SAP Gateway OData services.

    3. In a new SAP GUI window, enter transaction /IWFND/MAINT_SERVICE.

    4. Choose ExportSpreadsheet.

    5. Leave the Format field unchanged and choose Continue (Enter).

    6. Save the file on the WTS (for example named Export1.xlsx).

    7. In Microsoft Excel, scroll down the spreadsheet (Ctrl+End) and note the number of rows.

Task 3: Execute Task List SAP_FIORI_CONTENT_ACTIVATION

Steps

  1. In your SAP S/4HANA system, start transaction /UI2/FLPCM_CUST again. Only proceed with the next step if the message "Content is being updated. Please restart the transaction in a few minutes." is not displayed.

    1. Continue working in your SAP system using the train-## user.

    2. Enter transaction /UI2/FLPCM_CUST.

    3. In case the message "Content is being updated. Please restart the transaction in a few minutes." is shown: choose Exit, wait some minutes and re-start transaction /UI2/FLPCM_CUST.

    4. Proceed with the next step only if the message "Content is being updated. Please restart the transaction in a few minutes." is not displayed anymore at the start of transaction /UI2/FLPCM_CUST.

  2. In your SAP S/4HANA system, execute task list SAP_FIORI_CONTENT_ACTIVATION (transaction STC01) in background mode with the following parametrization:

    • Select/Confirm SAP Business Roles for FLP content activation
      • SAP_BR_EMPLOYEE
      • SAP_BR_SALES_MANAGER
    • Create Users with generated Business Roles (SU01)
      • Password: Provide a valid password (twice)
      • Add. Role Assignment: composite role Z_FIORI_FOUNDATION_USER

    Caution

    Make sure not to hold further locks before starting the execution; you may use transaction SM12 to list locks.
    1. Return to the SAP GUI window with the prepared task list run for task list SAP_FIORI_CONTENT_ACTIVATION.

    2. Select Change Parameters for the task with description Select/Confirm SAP Business Roles for FLP content activation.

    3. Select the roles SAP_BR_EMPLOYEE and SAP_BR_SALES_MANAGER.

      Note

      You may use the Filter to search for roles. To see the roles you selected at the top of the list, choose Sort selected Roles.

      To save your settings, select Save and choose Back.

    4. Select Execute (first column of the table) for the task with description Create Users with generated Business Roles (SU01), then select Fill Parameters for this task.

    5. Enter a valid Password (twice). For Add. Role Assignment:, select composite (!) role Z_FIORI_FOUNDATION_USER. Keep all other settings unchanged, choose Save to save your settings, and choose Back.

    6. Keep all other settings unchanged and choose Start/Resume Task List Run in Background (F9).

    7. You may choose Auto (Set Auto Refresh Timer) to auto-refresh the task list run. Do not change the 60 seconds interval.

      Expect a runtime of about 30 minutes.
  3. Analyze again the number of SAP Gateway services that are currently registered.

    1. Enter transaction /IWFND/MAINT_SERVICE and choose Refresh Catalog.

    2. Choose ExportSpreadsheet.

    3. Keep the Format field unchanged and choose Continue (Enter).

    4. Save the file on the WTS (for example named Export2.xlsx).

    5. In Microsoft Excel, scroll down the spreadsheet (Ctrl+End) and note the number of rows. Compare the result with the number of rows in Export1.xlsx.

  4. Analyze which test users have been created.

    1. In the task list run for task list SAP_FIORI_CONTENT_ACTIVATION, select Show Task Log for the task with description Create Users with generated Business Roles (SU01).

      Note

      If you have closed the task list run monitor, use transaction STC02 to access the log of your task list run.
    2. At the bottom of the screen, note the logline Summary user (click icon). Choose the icon in the Details column.

    3. The system shows a list of test users and their role assignments.

Task 4: Logon with Test User

Steps

  1. Open the SAP Fiori launchpad in your SAP S/4HANA system using one of the generated test users.

    1. You are connected to the WTS as Microsoft Windows user, TRAIN-##.

    2. Close all instances of all web browsers on the WTS.

    3. Start one of the following web browsers:

      • Microsoft Edge
      • Google Chrome
    4. Enter the URL of your SAP Fiori launchpad

      • Q team: https://fsqhost.wdf.sap.corp:44320/sap/bc/ui2/flp
      • P team: https://fsphost.wdf.sap.corp:44330/sap/bc/ui2/flp
    5. Choose Cancel in case your web browser offers to send your X.509 client certificate.

    6. Enter the credentials of one of the test users.

      Note

      You determined the User in the last task. You entered the Password as part of the task list parametrization.
    7. Feel free to explore the offered content.

Log in to track your progress & complete quizzes