Authorisations · informational
The catalog is the right to run; group and space only layout
The catalog is the right to run; group and space only layout. PFCG assignment, /UI2/FLPCM_CUST, App Finder. Group-only assignment is the usual go-live defect. From the delivery checklist: Business catalog: intent + tile, end user authorisation; Technical catalog end user is not put on the role; Copying the standard business role as-is is a SoD risk. This note is in the Authorisations cluster. Independent Istanbul consulting: inbound is email and the form on this page; destination, identity and the call site (S/4 vs BTP) are written in discovery.
What a business catalog carries
What a business catalog carries. PFCG assignment, /UI2/FLPCM_CUST, App Finder. Group-only assignment is the usual go-live defect. Checklist: Business catalog: intent + tile, end user authorisation; Technical catalog end user is not put on the role. Write the call site (S/4 vs BTP) and the identity chain in discovery; do not mix layers in the same sprint.
- Business catalog: intent + tile, end user authorisation.
- Technical catalog end user is not put on the role.
Why group and space are not authorisation
Why group and space are not authorisation. PFCG assignment, /UI2/FLPCM_CUST, App Finder. Group-only assignment is the usual go-live defect. Write the call site (S/4 vs BTP) and the identity chain in discovery; do not mix layers in the same sprint.
- Why group and space are not authorisation.
- PFCG assignment, /UI2/FLPCM_CUST, App Finder. Group-only assignment is the usual go-live defect.
- Inbound is email and the form on this page.
Cut the catalog without inflating the role
Cut the catalog without inflating the role. PFCG assignment, /UI2/FLPCM_CUST, App Finder. Group-only assignment is the usual go-live defect. Checklist: Copying the standard business role as-is is a SoD risk. Write the call site (S/4 vs BTP) and the identity chain in discovery; do not mix layers in the same sprint.
- Cut the catalog without inflating the role.
- PFCG assignment, /UI2/FLPCM_CUST, App Finder. Group-only assignment is the usual go-live defect.
- Inbound is email and the form on this page.
FAQ
What decision does this note record?
The catalog is the right to run; group and space only layout. PFCG assignment, /UI2/FLPCM_CUST, App Finder. Group-only assignment is the usual go-live defect. Business catalog: intent + tile, end user authorisation.
What belongs in the discovery note?
Business catalog: intent + tile, end user authorisation; Technical catalog end user is not put on the role; Copying the standard business role as-is is a SoD risk. Call site, destination and authorisation are written before build.
Do you sell SAP licences or claim SAP Partner status?
No. Independent Istanbul delivery. Inbound is email and the form on this page. Licences are bought from SAP.
Need this decision on your landscape? Written pre-assessment in 48 hours.
We do not sell licences. Destination, authorisation and model placement are written down.