EDUCAÇÃO E TECNOLOGIA

Part 4: User and Roles for SAP BTP Workflow and Flexible Workflow

This is part of a series of articles, which describe the steps to integrate an extension workflow using SAP Workflow Management on Business Technology Platform (BTP Workflow) into a Flexible Workflow in SAP S/4HANA OP.

Part 1: Integrating an Extension Workflow on SAP BTP into a Flexible Workflow
Part 2: SAP BTP Cockpit Configuration  for Usage of SAP Workflow Management
Part 3: SAP S/4HANA Backend Configuration to Communicate with SAP BTP
Part 4: User and Roles for SAP BTP Workflow and Flexible Workflow
Part 5: Configure Cloud Connector for Workflow Integration
Part 6: Workflow Scenario with Extension Step
Part 7: Flexible Workflow in Integration Scenario
Part 8: Extension Workflow using SAP Workflow Management on SAP BTP
Part 9: End-to-End Test of Workflow Integration Scenario
Part 10: Problem Solving of Workflow Integration Scenario

1. Create Callback Communication User
2. Create and assign Role for Communication User
3. Create Role for Monitoring User
4. Workflow Creating User


In backend systems run transaction SU01 to create a user, which will be used from SAP BTP to send back information from external workflow.

  • Create new user and remember the communication user name, sample:  BTP_CAS_COMM
  • Tab Address: give a name and function

  • Tab Logon Data:
    • User Type is System
    • Enter a password and remember the communication users password

top


Refers to documentation in SAP Help

In backend systems run transaction PFCG to create a new role, which is intended to be assigned to the communication user, which was created in above section.

  • Create a new single role, sample: Z_BTP_COMMUNICATION
  • Save

  • Tab Menu:
    • Dropdown: Authorization Default
    • New popup opens:
      • Authorization Default: choose from value help SAP Gateway Business Suite Enablement – Service
      • In table enter in column TADIR Service: SWF_CPWF_NOTIFICATION_SRV
      • Button Copy

  • Tab Menu:
    • Dropdown: Authorization Default
    • New popup opens:
      • Authorization Default: choose from value help SAP Gateway: Service Groups Metadata
      • In table enter in column TADIR Service: ZSWF_CPWF_NOTIFICATION_SRV_0001
      • Button Copy

  • Save role
  • Tab AuthorizationsExpert Mode for Profile Generation >> Generate Role

  • Tab User: add user ID of communication user, push button User Comparison

At the end all traffic light icons on this screen must be green.

top


Refers to documentation in SAP Help

In backend systems run transaction PFCG to create the role for a user who monitors the integration between backend and SAP BTP.

  • Create a new single role (as above), sample: Z_CPWF_MONITORING, remember the role name for monitoring
  • Save
  • Tab Authorizations:
    • Button Change Authorization Data
    • Add the following authorization objects manually:
      • S_TCODE = SWF_CPWF_MON
      • S_CPWFMON = 03, 16

  •  Save and generate
  • At the end it should look like this:

  • Tab User: assign this role to the user, who is supposed to do the monitoring
  • Push button User Comparison

top


Having created a scenario, someone must run the generic Manage Workflows app in Fiori Launchpad according to SAP S/4HANA gateway system. Within this app it is possible to create a flexible workflow based on our scenario. In the referenced section is described how to figure out, which authorization is necessary to do so.

Check Blog Part 7: Flexible Workflow in Integration Scenario, section 2.2.4. Role

I recommend not to create the role now but to follow the chronological sequence of this blog series.

=> Conclusion: Having maintained all roles and assigned to the appropriate users, the preconditions of caring about the workflows during monitoring tasks are fulfilled. Furthermore, we are almost done with regards of communication between SAP S/4HANA backend system and SAP BTP. We need to set up a Cloud Connector, what we will do in the next part.

top


>> Next: Configure Cloud Connector for Workflow Integration