Skip to Content
Author's profile photo Liz Cawley

Let’s talk FCC – Role Assignment (Part 3 of 3)

Up to this point you should be pretty familiar with FCC and it’s capabilities. You know how to configure tiles and you know how to complete other administrative tasks like creating catalogs, groups as well as managing your site. In this blog I will show you how you can assign roles in your extended demo account. In the extended demo account SAP offers you get 1 account with combined access to admin and end user content. If you want to make a value prop for your organization or are just interested in seeing what the Launchpad you design would really look like to end users then leverage this blog.

From FCC go to the External Links tab and select SAP HANA Cockpit. HCP cockpit will open in a new tab and will display the dashboard that shows the overall information about your account.

Select the Services tab and click on the SAP HANA Cloud Portal Service (the Fiori launchpad is offered as part of this service). Select Configure SAP HANA Cloud Portal.


From the left side select the Roles tab and notice that your P# is assigned to the TENANT_ADMIN role. This role provides administrative privileges for the Fiori launchpad. You’ll also notice another P# assigned to your account, this is an SAP super user who is assigned to every extended demo account.


You can easily add more users to the TENANT_ADMIN tole by selecting the Assign option from the Individual users table. Alternatively, you could create an admin group and assign users to the group and role. We’re going to create a new role for our end users. Select the New Role option from the top table, provide a name for your role (ex: End Users) and choose OK. Now you can create individual users or a group of users to assign to the new role by choosing the Assign option from the table. In the popup enter the username of the person you’re assigning.


Return to the cockpit dashboard by selecting the b# from the breadcrumb in the top left, then choose the Authorizations tab. Enter the end user ID and choose Show assignments, you should see them assigned to the role you just created.

Return to FCC and open the catalogs tab, choose edit for the Human Resources catalog we created in Blog 2. Select the Roles tab, choose edit, then choose the + and in the popup check the new role we created and choose OK and then Save.


Select the Preview Site icon from the top right. Copy the URL from your launchpad and send it to the user you assigned to your account. Let the user login and see that the tiles, groups and category we created in the previous blogs are in the launchpad. Also notice they don’t have access to FCC or the other built in admin tools. They will also see the site settings we established in the second blog.

I hope this series has helped familiarize you with FCC and what you’re able to create as a Fiori Cloud Edition administrator. I encourage you to continue exploring FCC and see what you would need to do to run Fiori cloud edition productively in your company. There will continue to be more additions and improvements to FCC in the future and being part of the Technology RIG team, I intend to stay ahead of these innovations and inform you as they become available. So on that note, stay tuned 🙂

Assigned Tags

      You must be Logged on to comment or reply to a post.
      Author's profile photo Sanket Chimalwar
      Sanket Chimalwar

      🙂 Good series .

      Author's profile photo Johannes Wienhold
      Johannes Wienhold

      Hi Elizabeth,

      what I am missing is the connection between the roles you described above created in the portal to restrict access to the catalogue and the roles manged in HCP for example being defined in the web.xml of an application?

      It would make sense for me to define a role in the web.xml of the application and use the same role to manage the catalogue. How is this done? Or is there a mapping between these roles?


      Author's profile photo Elizabeth Thorburn
      Elizabeth Thorburn
      Blog Post Author

      Hi Johannes,

      This blog is specifically referring to roles for Fiori apps in the Fiori Configuration Cockpit (the admin environment for Fiori, cloud edition). Fiori apps are HTML5 apps. The apps you developed and deployed are found in HCP in the HTML5 app tab. if you have a subscription for Fiori, cloud edition the apps delivered by SAP are found in the subscriptions tab. Fiori is part of the HANA Cloud Portal service and that service allows you to define user access and permissions at the site and page levels as described in the blog.

      What you're referring to with defining roles in the web.xml of an app is correct for Java apps, not for Fiori apps. Does this help clear things up?

      Kind Regards,

      Technology RIG

      Author's profile photo Johannes Wienhold
      Johannes Wienhold

      Hi Elizabeth,

      thanks for your response, it helps a bit. But my use case is the following. I need to give user a role for example "project manager". This role should control in Lauchpad, which catalogue he can use. But it also should in the underlying Java apps, control certain permission which comes with this role.

      I understand from your blog that the roles are independently defined in Portal Admin, in HTML5 and in underlying Java apps. I am wondering now what is the mechanism that I can set up the user once and assign him to a role and this role assignment is valid throughout the whole process from Lauchpad, to HTML5 to JAVA.

      If you can shed some light on this I would greatly appreciate.


      Author's profile photo Former Member
      Former Member

      Hi Elizabeth,

      Thanks very much ,this blog is very helpful to me.

      Here I have one more question.

      I deploy a UI5 app in Fiori, then set the role and assign a user into the role.

      Click the UI5 app tile, How we can get the login username and his role in UI5 application.

      The role was configured SAP Hana Cloud Portal.

      Thanks again, hope for your further infomation.


      Author's profile photo Michael Appleby
      Michael Appleby

      Unless you are asking for clarification/correction of some part of the Document, please create a new Discussion marked as a Question.  The Comments section of a Blog (or Document) is not the right vehicle for asking questions as the results are not easily searchable.  Once your issue is solved, a Discussion with the solution (and marked with Correct Answer) makes the results visible to others experiencing a similar problem.  If a blog or document is related, put in a link.  Read the Getting Started documents (link at the top right) including the Rules of Engagement. 

      NOTE: Getting the link is easy enough for both the author and Blog.  Simply MouseOver the item, Right Click, and select Copy Shortcut.  Paste it into your Discussion.  You can also click on the url after pasting.  Click on the A to expand the options and select T (on the right) to Auto-Title the url.

      Thanks, Mike (Moderator)

      SAP Technology RIG

      Author's profile photo Elizabeth Thorburn
      Elizabeth Thorburn
      Blog Post Author

      Hi Kenny,

      If I'm understanding your question correctly, you would assign all end users to the role in HCP Portal. In this example I only assigned one user but you can assign many. So for example, if you have 3 users from dept a, 2 users from dept b and 4 users from dept c that all need access to the same app you can create a role name that makes sense (for ex: Approve leave request users) and then assign all 9 users to this role. In the launchpad they will have access to the app you created.

      If this doesn't answer your question then please follow Mike's instructions to open a discussion marked as a question and provide more details, you can link my name in the question so I'm sure to find it.


      SAP Technology RIG