The apps of SAP S/4HANA embedded analytics are organized by roles (also called business roles).
One or more roles can be assigned to each business user. This is the job of the security administrator who has permission to perform this task.
![](/service/media/topic/c1d0a396-ff98-435b-9277-ee542c9ca462/S4H420_20_en-US_media/S4H420_20_en-US_images/User to role_image.png)
SAP provide a large number of ready-made roles that can be used for a quick start. SAP have already assigned apps that are useful for each role.
However, the definition of a role can vary significantly between organization and the SAP-provided role might not contain all the relevant apps for your organization. The standard roles might also contain apps that are not relevant to the roles in your organization. So you should consider the standard roles as templates for creating you own custom roles. There are some roles that are generic so these might be suitable to use out-of-the-box, but the majority of roles will need to be custom-made and will include apps from various standard roles plus new apps the customer has developed. Also, bear in mind that when SAP deliver new releases of SAP S/4HANA, the standard roles may change. This is another important reason why you should not use standard roles for production systems.
Launch the video below to learn how to assign a role to a user.