Mass Creation of Fiori Roles in SAP S/4HANA

Transitioning to or leveraging SAP S/4HANA comes with the powerful advantage of SAP Fiori as a modern, intuitive interface. However, creating roles for Fiori traditionally demands significant time and effort, often becoming a bottleneck in your implementation process.

But worry no more — introducing the PRGN_CREATE_FIORI_FRONTENDROLE program, your ultimate solution for efficient and streamlined mass role creation.

This powerful tool empowers organizations to create roles with catalogs, spaces, and groups in bulk, drastically reducing manual effort and ensuring consistency across your Fiori roles. Executable directly via transactions SA38 or SE38, it helps you:
  • Save valuable timeby automating repetitive tasks in role creation.
  • Minimize errorswith consistent role creation process.
  • Accelerate role setupby adding catalogs, spaces, and groups.
Say goodbye to tedious role creation process with PRGN_CREATE_FIORI_FRONTENDROLE—tailored to keep your S/4HANA projects on track and optimized for success.

Let's dive deeper!

Once after executing the program, you can see various options as shown in the below screen shot:
Let’s have a detailed walk through of each of these options:
OptionDescription
Create Roles with MenuUsing this option role creation is possible by mapping them with Catalog/Groups/Spaces.
Change Roles and Attach MenuUsing this option, you can adjust the menu data for roles without affecting existing data.
Change Roles and Replace MenuThis option allows you to replace the menu data for roles, fully updating the current menu configuration.
These primary options can be used with additional “Assignment of Fiori Launchpad Catalog” options which are outlined below:
Sub-OptionDescription
Without templateThe “Without template” option allows you to enter the role details manually.
Import from FileAllows you to import a file with a pre-defined template.
Generate from Fiori Launchpad CatalogsA key feature that simplifies the process of creating role entries based on SAP Fiori launchpad catalogs.
Let us understand each of these options:

Create Roles with Menu + Without Template: Using this option you can create roles quickly/directly and map them with Catalog/Groups/Spaces.

Upon choosing this option, you can enter the role details manually as shown in the below screen:

Required

Select the Type of Menu Entry and choose the Name of Menu entry from F4.
The Menu Entry Type can be a Catalog, Group, or Space, while the Menu Entry Name corresponds to the respective Catalog ID, Group ID, or Space ID.
If the given role already exists, you may see an error as highlighted below:

Use the “Check Entries” option

It is recommended to use this option before selecting the execute option, this feature checks for any missed or incorrect entries once all fields are completed. It helps identify issues such as missing fields or incorrect values.

Note

Once this task is executed successfully, you may verity the roles using PFCG transaction code. Note that this activity will update the menu structure (Fiori catalogs and groups). Manual maintenance of authorizations is still required within PFCG.
Create Roles with Menu + With Template: Using this option, user can speed up creating mass roles by uploading a Tab Delimited text file.

Let us understand “How”?

Prepare a excel of role’s data with the following fields:
  • Role Name
  • Role Description
  • Type of Meny Entry (CAT_PROVIDER/SPACE_PROVIDER/GROUP_PROVIDER)
  • Name of the Menu Entry (Catalog ID/Space ID/Group ID)
Save it in a “Text format (Tab Delimited)” and when opened the file should be as below:
Select the Import from file option and select the file, and click Execute(F8)

Before executing, it is suggested to use the option “Check Entries”   to check for any discrepancies.

Upon executing, the roles will be created with the provided catalog/space/groups.

Create Roles with Menu + Generate from Fiori Launchpad Catalogs

This option will generate a single entry for each catalog in the assignment table on the following screen. The naming convention for the roles is derived from the catalog names through a systematic name conversion process. Users have the flexibility to customize this conversion by adding or removing prefixes as needed:
  • Delete Prefix:This option allows you to remove a specific name component from the beginning of the role name, providing a streamlined and relevant designation.
  • Add Prefix:Conversely, this feature enables you to insert a new name component at the start of the role name, offering a way to categorize or identify roles effectively.
Note that the role name is limited to 30 characters. If the name is not unique, the system places a sequential number at the end of it. The generated role name is not subjected to an existence check yet at this point. This check is performed later when the role is edited, taking into account the editing mode in the next screen.

Change Roles and Attach Menu

Using this option, you can adjust the menu data for roles without affecting existing data.

Example:
If there is a need to add a new space while retaining the current catalogs and spaces for all the created mass FIORI roles, this option can be utilized

To proceed:

  • Update an Excel file with the new space, catalog, or group you wish to add.
  • Convert the Excel file to a tab-delimited text format.
  • Select the “Change Roles and Attach Menu” under Processing mode and choose “Import from File” from the sub options, upload the file, and execute.

Change Roles and Replace Menu: This option allows you to replace the menu data for roles, fully updating the current menus.

Example:

If there is a requirement to replace the existing catalogs and spaces with a new space or catalog across all the created mass FIORI roles, this option can be used.

To proceed:

  • Update an Excel file with the new space, catalog, or group that will replace the existing menu.
  • Convert the Excel file to a tab-delimited text format.
  • Select the “Replace Menu” option (as shown below), upload the file, and execute.

This process enables efficient bulk updates to the menu configuration for multiple roles at once

What is the purpose of “Delete and recreate profile and authorizations” option?

Upon selecting this option on the program interface, existing authorizations will be deleted and replaced by the authorization default values or the applications contained in the SAP Fiori launchpad catalogs. The entire authorization is entered automatically into open authorization fields and organization levels. The profiles of the roles are then generated.

Backend Role Creation for Central Hub Fiori

If you’re using a dual-system setup (separate Fiori frontend and backend systems), SAP provides the PRGN_CREATE_FIORI_BACKENDROLES program. You can use this program to create a back-end role for selected Fiori front-end roles, or to copy them locally to a new role, and to copy the corresponding role menu of the front-end role.

If the role already exists, the role menu is deleted and replaced by the role menu of the front-end role.
The Program interface is as below:

Conclusion

In conclusion, transitioning to SAP S/4HANA is made more efficient and streamlined with the PRGN_CREATE_FIORI_FRONTENDROLE program. This tool eliminates the bottlenecks traditionally associated with Fiori role creation, enabling organizations to focus on more critical aspects of their implementation projects.

By automating the creation, updating, and management of Fiori roles, this program not only saves valuable time but also ensures consistency and reduces errors. Whether you need to create roles from scratch, modify existing roles, or align with SAP Fiori launchpad catalogs, the program’s versatile options cater to diverse business needs. Its seamless integration with backend role creation further enhances its utility in dual-system setups.

With PRGN_CREATE_FIORI_FRONTENDROLE, you can accelerate your SAP S/4HANA journey, optimize role management, and ensure your implementation projects stay on track. Take full advantage of this powerful tool to simplify your processes and achieve operational excellence.

Receive updates on upcoming webinars, the latest case studies, and more directly in your inbox. Stay informed and connected by subscribing to our newsletter.

Raghu Boddu

Meet Raghu Boddu an expert in SAP Security and Governance, Risk, and Compliance (GRC). With over 20+ years of experience in the field, Raghu has a deep understanding of the nuances and complexities of SAP systems and how to keep them secure. Raghu has worked with various clients across different industries, helping them implement effective security and GRC strategies to protect their sensitive data and meet regulatory compliance requirements. Raghu is a respected thought leader in the SAP security and GRC community, regularly sharing insights and best practices through presentations and publications. Whether you’re looking to improve the security of your SAP system or ensure compliance with relevant regulations, Raghu can provide the guidance and expertise you need to succeed.

Explore our success stories

A case study on analyzing Custom Transaction codes and updating the Risk Ruleset

In today’s dynamic business landscape, many SAP customers leverage custom transaction codes to streamline operations and enhance efficiency. However, with customization comes responsibility, as it introduces risks such as segregation…

How we helped businesses succeed by providing them with innovative and effective solutions to manage risks

In today’s business landscape, managing SAP systems can be challenging. Many companies struggle with Segregation of Duties (SoD) conflicts and irrelevant transaction codes, making audits cumbersome and increasing the risk…

Case study on SAP Licensing Optimization

Today’s business environment requires the efficient management of SAP licensing, though it can be challenging. This problem can be resolved by Optimus for SAP Applications, developed by ToggleNow, by offering…

Learn how we can help you and your enterprise through the GRC transformation journey. Choose the appropriate option and fill out the form. Let’s get started!

Product demo

Lorem ipsum dolor sit amet, consectetur adipiscing elit.

Detailed Discussion

Lorem ipsum dolor sit amet, consectetur adipiscing elit.

Partnership Discussions

Lorem ipsum dolor sit amet, consectetur adipiscing elit.