Integrated Analytics: SAP Analytics Cloud now embedded in SAP S/4HANA Cloud
we are living in challenging times.
I hope you and your loved ones are and will all stay healthy. Good Luck!
I am thrilled to open a new chapter: With the release 2020, SAP S/4HANA on premise integrates SAP Analytics Cloud for an embedded experience for business users.
Check out my new blog for details and please refer to Answer 14 below.
Questions have been raised about direct access to the embedded SAP Analytics Cloud. The longer explanation can be found below.
Upfront: The embedded SAP Analytics Cloud is fully managed by SAP S/4HANA Cloud. There is no need to log on to the embedded SAP Analytics Cloud and it is actually not possible.
SAP S/4HANA Cloud exposes the embedded SAP Analytics Cloud functionality through Fiori applications and this is all customers need to work with it.
Below you find my blog, which I will continue to update.
Thank you for your continued interest,
To get us started, let me share a demo recording with you and share the key capabilities
- Pre-defined Dashboards included in Fiori navigation
- Intuitive ad-hoc reporting with Data Analyzer (scroll to 7:35)
- Key user enhancements using “Manage KPIs and Reports” (scroll to 10:00)
You may also find the video here.
This following blog provides additional insights, trying to help answer the questions that this announcement may have triggered for you:
- What exactly is SAP Analytics Cloud?
- Why does SAP S/4HANA Cloud embed SAP Analytics Cloud?
- How does the embedding work?
- Does “embedded SAP Analytics Cloud” go beyond a simply iFrame integration?
- What scenarios are supported? In which way are embedded and enterprise tenants different?
- Do all SAP S/4HANA Cloud customers receive the embedded SAP Analytics Cloud or do I need to apply for it specifically?
- How do SAP S/4HANA Cloud customers receive the embedded SAC? Does an additional scope item need to be implemented? How much effort does that create?
- What can customers expect in terms of predefined dashboards?
- Can the pre-delivered dashboards be modified?
- Can I build my own content?
- Where can I find detailed information about the new features and how to use them?
- How does the lifecycle of custom content work?
- Does the “embedded scenario” increase my license costs?
- Does the embedded SAP Analytics Cloud replace any other technology or product?
- Is the embedded scenario restricted to SAP S/4HANA Cloud? What about on premise or STE?
- Can I test the embedded SAP Analytics Cloud in SAP S/4HANA Cloud?
Q: What exactly is SAP Analytics Cloud?
A: SAP Analytics Cloud is a SaaS solution for analytics, planning and smart prediction. Please refer https://www.sapanalytics.cloud/ for details.
Q: Why does SAP S/4HANA Cloud embed SAP Analytics Cloud?
A: Next to integrated operational processes, it takes first-class analytics to make an enterprise intelligent: Business users expect pre-defined reporting, seamlessly embedded into their daily work. They expect personalized access to data and ad-hoc analytical capabilities to get as much value out of their enterprise data as possible. And with the deep integration of SAP Analytics Cloud into the solution, this is exactly what SAP S/4HANA Cloud customers get with the 1911 release.
Q: How does the embedding work?
A: For each SAP S/4HANA Cloud tenant, a new SAP Analytics Cloud tenant is provided. The SAP Analytics Cloud accesses the ABAP CDS views live, using the transient analytical queries generated automatically for the CDS views. Please look at the Architecture diagram in Figure 1: High Level Architecture. SAP Analytics Cloud UIs will be embedded in iFrames and published on the Fiori Launchpad.
All relevant SAP Analytics Cloud features – from tenant provisioning and connectivity to content management and lifecycle – have been published as APIs, so the embedded SAP Analytics Cloud can be “remote controlled” by the embedding applications. These APIs are available to other applications and even Partners.
This means, that the embedded SAP Analytics Cloud is completely managed by SAP S/4HANA Cloud. Customers do not need to log on to the embedded SAP Analytics Cloud specifically, nor can they.
Figure 1: High Level Architecture
Q: Does “embedded SAP Analytics Cloud” go beyond a simply iFrame integration?
A: Yes! SAP Analytics Cloud is deeply embedded into the Fiori UX paradigms: Launched from the Fiori launchpad and based on live data connections and thus up-to-date information, SAP Analytics Cloud stories are integrated by means of a “wrapper application”: This software takes care of offering screen-variant saving and personalization features as well as intend-based navigation between analytical and operational applications. Role-based assignment of the SAP Analytics Cloud Stories is also available, and the content lifecycle is also fully handled by SAP S/4HANA Cloud.
A lab preview showing screen variants and Intend-based navigation can be found in Figure 2. Of course, users will not be able to simultaneously trigger both option. These options have been overlaid in one screen for simplicity.
Figure 2: Screen Variants and Intend-based Navigation (edited to show both features in one screen)
Q: What scenarios are supported? In which way are embedded and enterprise tenants different?
A: The embedded SAP Analytics Cloud uses the live data connection to the embedding SAP S/4HANA Cloud data exclusively. Thus, up-to-date dashboards and ad-hoc data analyzer scenarios as well as the consumption of analytical applications are supported. Incidentally, the authorization concept of S/4HANA Cloud remains valid as well.
Other SAP Cloud applications and also SAP partners will eventually also offer embedded analytics and thus spin off embedded SAP Analytics Cloud tenants. In any given customer situation, one might thus find several embedded SAP Analytics Cloud tenants, each working exclusively for the embedding application. They are also fully managed by the respective embedding application. The embedded SAP Analytics Cloud tenant is available only in the scope of the embedding application and cannot be used for any other application or 3rd party data. It is not necessary to directly log on to the embedded SAP Analytics Cloud and the the case of SAP S/4HANA Cloud, it is not possible even. SAP S/4HANA Cloud exposes the embedded SAP Analytics Cloud functionality through Fiori applications and this is all customers need to work with it.
If you are interested in scenarios that require data acquisition, e.g. planning or prediction, or a cross application scenario, you need to license an enterprise SAP Analytics Cloud tenant in addition.
See Figure 3: Embedded and Enterprise scenarios for details.
The embedded tenant does not interfere with the enterprise tenant, so you can continue to connect from the enterprise tenant as if the embedded did not exist. To save potential double efforts, means to move content from the embedded to the enterprise tenant are being looked at.
Figure 3: Embedded and Enterprise scenarios
Q: Do all SAP S/4HANA Cloud customers receive the embedded SAP Analytics Cloud or do I need to apply for it specifically?
A: No need to apply or trigger anything explicitely. By now, all SAP S/4HANA Cloud customers may use the embedded SAP Analytics Cloud, as all required tenants have been provisioned.
Q: How do SAP S/4HANA Cloud customers receive the embedded SAC? Does an additional scope item need to be implemented? How much effort does that create?
A: After the upgrade, dedicated scripts spin off a new SAP Analytics Cloud tenant for each S/4HANA Cloud tenant (so, one for your Q and one for your P system). These scripts also set up the live data connection between SAP Analytics Cloud and SAP S/4HANA Cloud and finally hook SAP Analytics Cloud into to common user management. Thus, the entire system landscape enhancement is fully automated.
For some of the new stories or data analyzer reports, a scope item has to be activated first.
This is a small one-time effort. Please check Katharina Klug’s newly-released overview blog for details and documentation: every story or data analyzer report with an asterix (*) requires a scope item activation.
Q: What can customers expect in terms of predefined dashboards?
A: The last step of the landscape provisioning is the automatic installation of so-call business content. SAP Analytics Cloud models and stories are installed in your tenants and they are ready to run.
The best overview of the content built for the embedded SAP Analytics Cloud in SAP S/4HANA Cloud can be found in Katharina Klug’s newly-released overview blog.
This blog will continuously be updated, so please find the latest information in that blog.
Below are the links that I shared in the past for your reference:
The first delivery focused on Finance. For more details, please check Katharina Klug’s blog.
Additional stories/dashboards have been included in the SAP S/4HANA Cloud delivery of February 2020 (release name 2002), check out the “Analytics” section of Katrin Deissner’s blog.
Q: Can the pre-delivered dashboards be modified?
A: Yes, by making a copy of the pre-delivered dashboard and modifying the copy. Actually, this functionality will be made available in the release 2002 according to current plans. Until then, business users may use the screen variant saving to personalize the stories for their needs.
Q: Can I build my own content?
A: Yes. SAP S/4HANA Cloud extensibility concepts also apply to content: Key users can use the already existing Fiori application “Manage KPIs and Report” to build their own stories with the intuitive what-you-see-is-what-you-get WYSIWYG SAP Analytics Cloud designer. You may even create your custom ABAP CDS view and build your own content on top of this.
Q: Where can I find detailed information about the new features and how to use them?
A: Given you have the necessary key user authorizations, you may create your own dashboards and data analyzer reports. Let me point you to the following very detailed blogs by Avinash Kumar. They come with screen shots and step-by-step explanations how to …
- … create your own dashboard (story)
- … create your own data analyzer reports
- … transport your embedded SAC artefacts
Q: How does the lifecycle of custom content work?
A: SAP Analytics Cloud artefacts will be moved to receiving tenants using the standard SAP S/4HANA Cloud mechanisms. SAP ensures, that content and other configurations or enhancements (like your custom CDS view) are consistently treated automatically.
Technically, the Analytics Content Network (ACN), an integral component of SAP Analytics Cloud, takes care of moving content between tenants. This technical process has once more been included into the Fiori tool set and thus customers do not need to trigger any additional processes to move content.
Q: Does the “embedded scenario” require additional licenses?
A: No, the embedded SAP Analytics Cloud features are covered by the existing SAP S/4HANA Cloud license.
Q: Does the embedded SAP Analytics Cloud replace any other technology or product?
A: No, it does not. It is an additional offer to support dashboard and data analysis. If at a later state technology or products will be substituted by SAC, this will be announced 2 releases in advance as always.
Q: Is the embedded scenario restricted to SAP S/4HANA Cloud? What about on premise or STE?
A: Yes, the embedded scenario is restricted to SAP S/4HANA Cloud. The complete embedded experience is not available for SAP S/4HANA on premise, nor for the STE (single tenant edition).
However, with the release 2020, SAP S/4HANA on premise integrates SAP Analytics Cloud for an optimized experience for business users by offering a similar wrapper code. Please check the my new blog for details.
In fact, from a business user perspective, there is not much difference: The integration works in much the same way for SAP S/4HANA on premise and SAP S/4HANA Cloud. In both scenarios, the business user launches the SAP Analytics Cloud story from the personal Fiori Launchpad, it opens in the iFrame and screen variants and intent-based navigation are supported.
The business user experience is therefore similar, except for one aspect: Data Analyzer reports are not offered for SAP S/4HANA on premise users, this feature is available in the cloud only.
Q: Can I test the embedded SAP Analytics Cloud in SAP S/4HANA Cloud?
A: Yes, SAP S/4HANA Cloud offers a trial.
Thanks for sharing details. This is very helpful.
Useful information. Thanks for sharing Rolf.
Thanks for the updates
Thanks for sharing!!
Thanks for the sharing this new insight.
Can you please clarify if the embedded scenario is available for S/4HANA Cloud - STE? I suspect not but wanted to understand if its on the roadmap or not.
thank you for reaching out. I can confirm your suspicion 🙂
The embedded scenario will not be available for STE edition of S/4HANA Cloud.
Technically, the STE is close to the S/4HANA on premise version. I have already outlined plans to offer embedding capabilities for the on premise version, though I cannot promise.
Once that comes, it should not be too difficult to also offer it for the STE.
I hope this answers your question.
Thank you for the detailed information.
The link does not work.https://www.youtube-nocookie.com/embed/rKn6isbmu6s?start=3070
thank you for pointing this out. I believe that by now the full video is no longer available publicly.
You may still find it on SAP's TechEd archive, if you have access to it. https://events.sap.com/teched/en/session/48210
However, this is generally not the case, so I have removed the link.
Thanks for sharing this useful information. Are there hands on sessions/recordings already available?
I am not aware of a hands-on session, but I have recorded a demo of the key functionalities by now, see above.
Let me know if this adds value...
It definitely helps a lot to see the solution in action! Thank you very much.
How to know if our Q system on 1911 has been integrated with SAP Analytics Cloud ? In the FAQ it states that some scripts will run to enable this? how do we know that scripts are run.? I tried to use the Manage KPI and Reports app and as per documentation I tried to create a Story but no such option available to do so.
Please kindly advise.
thank you for reaching out.
The upgrade of customer tenants (Q first, P later) has just started. It will be a phased approach with the goal to upgrade all S/4HANA Cloud tenants for customers by the end of this year. So you may have to be a little patient.
The clearest indication - if you have the authorization to use the key user tool - is the new "story" tab in Manage KPIs and Reports.
Thanks for your input.
I checked my Q system which is on 1911, the "Manage KPI and Reports" App does not have the "Story" tab. The message is far clear now, I have to wait to try.
Maybe the best blog I have seen yet. Thank you for this!
I enjoyed your demo very much.
I see the embedding application is S/4 HANA Cloud, so could it be possible to create an SAC story with a grid for planning and send/write plan data from the SAC story Grid to the ACDOCP table in hana database.
Let me know your thoughts
for the time being, planning capabilities are not included in the embedded SAP Analytics Cloud.
The scenario you describe, which is a valid one, points to the Enterprise scenario.
Great blog and video, thank you for sharing this.
Understand the upgrade has just started and it's in a phased approach.
How would we know which phase we (customer) will be on to get the embedded SAC on our Q and P systems? Any contact person we can reach out to find out the exact dates of the roll out to our systems?
Appreciate your feedback as we are very keen and excited to use the functionality since the Q upgrade recently 🙂
thank you for the kind words.
Our operations team has provisioned the first embedded SAP Analytics Cloud tenants to match the Q-tenants for the first group of customers and over the next weekend (Nov. 23/24) the productive P tenants will follow.
Once this has been completed successfully, more and more customers will follow - based on the experience and also customer feedback gained in the first phase.
Much as I would like, I am afraid, I cannot offer a contact person for you, nor share a detailed plan.
Good news is we now have the embedded SAC in our Q system and the new apps are working!
Bad news is that we cannot say the same for our P system - getting the "fail whale" error message "It seems your profile is not configured for this system. Please contact your system administrator, or end this session and try again later."
I thought the live data connection between SAC and SAP S/4HANA Cloud is automatic (as per our Q system)
Who should we contact to get this working for our P system? We have raised a ticket to SAP but it's been moved from one team to another without any resolution.
Appreciate your advise.
Do you foresee similar embedding capabilities for the Fiori Front-end Server? Having no S4HANA system but only CRM/ECC in the landscape, connected to FES we would like to embed the SAC stories, perfectly using native embedding scenario. If I understand it correctly, the only way is to "hardode" the link to the particular story in a Launchpad Tile. Could you please confirm it? 🙂
yes, I can confirm your assumption: The SAP S/4HANA Cloud is required. The Fiori Front-end server alone cannot offer the end-to-end embedding experience.
It is possible to add the link to an SAC story in a Fiori tile and it will open up the story but in a new browser window. This might suffice, but the tight integration into the Fiori experience -- and of course the automated provisioning - comes with S/4HANA Cloud.
Great blog to understand how the embedding work.
In S4HC best practice scope item like 4DP for liquidity planning with SAC or 3Y0 sales planning with SAC, there are some input typing from end user. I suppose this is using SAC planning capability. Does it indicate extra SAC planning license ? and does it mean it's under import connection instead of live connection?
Hope to get your feedback!
you are right: These scope items refer to planning capabilities in SAC and thus require the Enterprise scenario with data acquisition -- with the extra SAC planning license.
Thank you Rolf. Very nice to know.
Another question is how is the SAC OEM data center mapping with the S4HC data center? Like my customer use S4HC data center in China, does it mean all the embedded SAC will come from one OEM data center in China? or maybe from different data center globally?
I cannot share details, however, we try to make sure that the tenants for SAP S/4HANA Cloud and SAP Analytics Cloud are co-located in the same data center or in the same region. We are of course aiming for short geographical distances ton ensure fast responses.
Hi Rolf, very interesting and providing a great overview what to expect. I especially like the "intend-based navigation / jump-to". I am from the Analytics "side" and I think the report-to-report interface available with BW is a great feature and I was already looking for this in the SAC context, but unfortunately it is not available at the moment and also not on the development list.
I was quite happy to read in the questions section that the wrapper application (coding) is planned for Q3/2020 also for the S/4 on prem. Will the intend-based navigation also planned for the on-prem implemenation?
thank you first of all for the kind words.
Yes, according to current plans the intend-based navigation will be made available for embedded SAP Analytics Cloud in SAP S/4HANA on premise, too.
For me this is an important and attractive feature and I believe customers will expect it to work once we offer "embedded for on prem".
I cannot commit, though. This is the current state of our plans ...
Hi Rolf, does SAC OEM license 1:1 mapping to S4HC users? So every S4HC user can have access to SAC OEM content.
SAP has set up a common user management for SAP S/4HANA Cloud and the embedded SAP Analytics Cloud. So, technically all S/4HANA Cloud users can access the embedded Analytics.
Please keep in mind, though, that the access rights need to granted first: You need to have a suitable business user role to run the embedded analytics.
Thanks for usefull informations.
Do you know where I can find informations about How to activate SAC embedded ?
we Have a Group reporting demo tenant 2002 but here it seems that some pre works should be performed in order to work with the SAC embedded tile.
well, actually there is nothing to activate. The embedded SAC should work out of the box - as long as we are talking about an S/4HANA Cloud tenant.
Without further details I find it hard to comment. This issue should be investigated by our support team. May I ask you to please create a ticket on component LOD-ANA-OEM.
Please share the URL / ID of the tenant that you use and please let us know what exactly are the issues that you encounter: Do you see the new tiles on your Fiori Launchpad/Home screen? What happens when you click on them, do you get an error message?
Hi Rolf thanks for your quick answer really Appreciate.
I suppose that it is a role restriction problem because yes I see all the new tile for example " Manage KPIs and reports but each time i receive the message " it seems your system is not configured for this system"
I also read in the previous posts that "You need to have a suitable business user role to run the embedded analytics." Here do you know which role we should assigned to our Group reporting users ?
the error message "your system is not configured ...." to me is an indication that the embedded SAC has not yet been provisioned completely. So, please, create a ticket to request support.
Regarding the roles: that should really be specified in the S/4HANA Cloud documentation. However, I have been able to run the Group Reporting in our demo systems, so I can share the roles that have been given to me:
Please understand that this is not a recommendation for your productive system; I just list them because they worked for me technically.
Hope this helps,
Thank you for the wonderful blog. Detailed and informative. Here are few questions, could you please help me to understand.
Thank you very much.
thank you for the kind words. Let me try to answer your questions:
Functionality: SAP Analytics Cloud embedded used the live data access to the data of the embedding application, here SAP S/4 HANA Cloud. There are no limitations for this use case that I am aware of. In the Enterprise version (stand alone) of SAP Analytics Cloud, more use cases are covered. For details please refer to answers for question 5: https://blogs.sap.com/2019/10/24/integrated-analytics-sap-analytics-cloud-now-embedded-in-sap-s4hana-cloud/comment-page-1/#Question5
You cannot bring in additional data to the embedded SAP Analytics Cloud. If you wish to access data sources other than S/4HANA Cloud, e.g. your flat file, you have to go for the Enterprise scenario.
Data access in the embedded scenario means live access to released analytical CDS views exclusively.
The embedded SAP Analytics Cloud is by now part of the S/4HANA Cloud product. It will always be there for you to use. If you wish to opt in for more comprehensive scenarios such as cross-application analytics or planning/prediction/app-building, this requires the Enterprise license. They can co-exist, so you can connect the Enterprise tenant to S/4HANA Cloud and use the live data access and the data replication connection as if the embedded scenario did not exist.
Hope this helps to clarify,
wondering whether hana views can be used as data source for embedded SAC ?
no, you cannot use Hana Views. You have to use CDS views.
To my limited knowledge about S/4HANA Cloud, users would not even have access to the underlying HANA database layer.
Thank you for your immediate response.
when we used embedded SAC using data from on-premise s/4hana is this limitation still apply?
I have to ask for a bit of patience. I will check with our dev experts and get back to you.
no worries. just curious.
the obligation to use CDS which scared me :). I have to poke our abaper more than ever.
so, here the answer from development:
With 2021, S4HANA OnPrem release any stories can be consumed in the wrapper appplication.
So, if you can upgrade to this release, you can then define your story based on a live connection to the HANA data base under S/4HANA on premise and then integrate it into the Fiori Launchpad using "Manage KPIs and Reports".
Remark, that the Intent-based navigation (IBN) will have limitations in this case. The IBN works on the principle of identical technical names. For IBN to work for stories based on the HANA live connection, the dimensions in the HANA models have to match with the S/4HANA dimension names.
Hope this helps,
thank you for the update. very informative.
a little bit out of the topic, is this embedded SAC the one that included in SAP RISE ?
Hi Michael T
Yes every RISE offering has S/4HANA contained therein (choice of public or private cloud deployment type), therefore SAC is embedded implicitly in that.
However the bigger picture is that RISE bundles S/4HANA, Ariba Supplier Network, Asset Intelligence Network, Logistics Business Network, and includes a BTP Enterprise Agreement (consumption plan).
SAP Rise covers various products - if I understood it correctly.
S/4 plans to offer the embedded SAC also under the SAP RISE initiative.
Henry Banks & Rolf Sieberg ,
really appreciate for the info.
Thanks a lot.
Thank you very much Rolf for these answers. Very helpful.
Thanks for the excellent presentation and demo. It would be great to have the "Manage KPIs and Reports" Fiori app available for BW/4HANA queries. "Manage KPIs and Reports" would be a generic tool connecting any InA datasources to SAC. Which SAP group would be responsible for creating this generic version of the "Manage KPIs and Reports" Fiori app? Would it be the Fiori team? The SAC team? Or BW team?
the "Manage KPIs and Reports" application is part of the SAP S/4HANA solution.
So, you might reach out to your S/4HANA contacts.
Thanks for widespread & elaborated SAC-S4HANA blog?
Do you mind sharing similar insights with regard to basic SAC architecture
thank you for the kind words.
There are some blogs out there already:
Great Blog! Thank you so much for sharing.
Gnana Sri Durga Paruchuri
Thank you for your kind words. Glad you like it.
Thank you Rolf for giving the detail information.
Does the embedded SAC have machine learning, AI, smart insights, Key influences, smart discovery etc features like enterprise SAC?
thank you for reaching out. The embedded SAC is based on a live connection, so every feature that requires a data acquisition model is not supported.
The features that you mention require an enterprise SAC.
So, can we create our own model?
Is there any standard pre-delivered model in embedded SAC?
if yes, can we upload data thru excel in that model?
Or is it always going to follow the CDS views as datasource architecture?
the embedded SAP Analytics Cloud comes with pre-delivered content based on S/4HANA Cloud analytical CDS Views (links about, see question 8 that holds a link to a more detailed blog).
Customers are free to use the extension concepts and thus create their custom CDS Views and custom stories. However, everything you create in the embedded SAP Analytics Cloud has to be based on live connectivity.
I am working hard to get my organization to utilize SAP Analytics Cloud, as I see the potential it brings a company like ours. I've shared this blog, along with another source, to show our IT organization that this tool is available as part of our S4 HANA Cloud installation. Unfortunately, our IT professionals are being told by our implementation consultants that SAC licenses are separate from S4 licenses.
Can you please confirm that SAC is still provided as an integration within S4 HANA Cloud and has not been discontinued in this format? I would like to provide this information to our IT leadership, so that we can take the proper steps to make it active.
Along those lines, assuming it is still an active offering, what would be the best direction to point our IT professionals to activate SAC within S4?
Thank you for your time and assistance!
thank you for reaching out and thank you also for promoting SAP Analytics Cloud.
The situation is as follows:
S/4HANA Cloud will always be provisioned with an embedded SAP Analytics Cloud - without the need for additional licenses and thus with no additional costs.
Your IT does not need to activate SAP Analytics Cloud in this scenario: This is really, what "embedded" means; everything from the initial provisioning to user and connection set up and finally content installation has been fully automated.
If you are working with S/4HANA on premise, the situation is different: In that case, there is no embedded SAP Analytics Cloud. Should you wish to use SAP Analytics Cloud, you need to purchase an additional license. The SAP Analytics Cloud stories can be integrated into the Fiori Launchpad, but administration tasks remain. For details, please check: https://blogs.sap.com/2020/10/06/s-4hana-on-premise-integration-of-sap-analytics-cloud-optimizes-business-user-experience/
Hope this helps,
It is not very clear for me how the authorization concept works for the Embedded SAP Analytics Cloud. I have a test user that is assigned to some specific company codes only. For some of the reports, I can see only those company codes, for other reports I can see all the company codes.
I have noticed in the CDS view that when I have the keys coming from I_JournalEntryItem (Company Code, Fiscal Year etc.), I can see only the company codes assigned to my user, if I have only Company Code in key or any other field, I will see all the company codes.
Is this how the authorization concept works? Is there another option that I am not aware of?
Thank you in advance for your answer.
I cannot comment on your specific situation.
So how does the authorization concept work in general?
Once the Embedded Story has been built, it has to be assigned to a business catalogue. It is feasible as far as I know to assign the story to multiple catalogues.
The catalogues are then used to build business roles, that also include authorizations.
And finally, the business roles are assigned to users.
It would now seem to me that you have at least two roles with different privileges and thus one story/privilege combination allows you to see all, whereas the other one is more restrictive.
If this does not help, please reach out to S/4HANA support or check the documentation regarding the authorization concepts.