Technical Articles
Part 4: User and Roles for SAP BTP Workflow and Flexible Workflow
This is part of a series of articles, which describe the steps to integrate an extension workflow using SAP Workflow Management on Business Technology Platform (BTP Workflow) into a Flexible Workflow in SAP S/4HANA OP.
Part 1: Integrating an Extension Workflow on SAP BTP into a Flexible Workflow
Part 2: SAP BTP Cockpit Configuration for Usage of SAP Workflow Management
Part 3: SAP S/4HANA Backend Configuration to Communicate with SAP BTP
Part 4: User and Roles for SAP BTP Workflow and Flexible Workflow
Part 5: Configure Cloud Connector for Workflow Integration
Part 6: Workflow Scenario with Extension Step
Part 7: Flexible Workflow in Integration Scenario
Part 8: Extension Workflow using SAP Workflow Management on SAP BTP
Part 9: End-to-End Test of Workflow Integration Scenario
Part 10: Problem Solving of Workflow Integration Scenario
Content
1. Create Callback Communication User
2. Create and assign Role for Communication User
3. Create Role for Monitoring User
4. Workflow Creating User
1. Create Callback Communication User
In backend systems run transaction SU01 to create a user, which will be used from SAP BTP to send back information from external workflow.
- Create new user and remember the communication user name, sample: BTP_CAS_COMM
- Tab Address: give a name and function
- Tab Logon Data:
- User Type is System
- Enter a password and remember the communication users password
2. Create and assign Role for Communication User
Refers to documentation in SAP Help
In backend systems run transaction PFCG to create a new role, which is intended to be assigned to the communication user, which was created in above section.
- Create a new single role, sample: Z_BTP_COMMUNICATION
- Save
- Tab Menu:
- Dropdown: Authorization Default
- New popup opens:
- Authorization Default: choose from value help SAP Gateway Business Suite Enablement – Service
- In table enter in column TADIR Service: SWF_CPWF_NOTIFICATION_SRV
- Button Copy
- Tab Menu:
- Dropdown: Authorization Default
- New popup opens:
- Authorization Default: choose from value help SAP Gateway: Service Groups Metadata
- In table enter in column TADIR Service: ZSWF_CPWF_NOTIFICATION_SRV_0001
- Button Copy
- Save role
- Tab Authorizations: Expert Mode for Profile Generation >> Generate Role
- Tab User: add user ID of communication user, push button User Comparison
At the end all traffic light icons on this screen must be green.
3. Create Role for Monitoring User
Refers to documentation in SAP Help
In backend systems run transaction PFCG to create the role for a user who monitors the integration between backend and SAP BTP.
- Create a new single role (as above), sample: Z_CPWF_MONITORING, remember the role name for monitoring
- Save
- Tab Authorizations:
- Button Change Authorization Data
- Add the following authorization objects manually:
- S_TCODE = SWF_CPWF_MON
- S_CPWFMON = 03, 16
- Save and generate
- At the end it should look like this:
- Tab User: assign this role to the user, who is supposed to do the monitoring.
- Push button User Comparison
4. Workflow Creating User
Having created a scenario, someone must run the generic Manage Workflows app in Fiori Launchpad according to SAP S/4HANA gateway system. Within this app it is possible to create a flexible workflow based on our scenario. In the referenced section is described how to figure out, which authorization is necessary to do so.
Check Blog Part 7: Flexible Workflow in Integration Scenario, section 2.2.4. Role
I recommend not to create the role now but to follow the chronological sequence of this blog series.
=> Conclusion: Having maintained all roles and assigned to the appropriate users, the preconditions of caring about the workflows during monitoring tasks are fulfilled. Furthermore, we are almost done with regards of communication between SAP S/4HANA backend system and SAP BTP. We need to set up a Cloud Connector, what we will do in the next part.