SAP Solution Manager 7.2 · Managing Security

What format do native Fiori app roles use, and what must you do after changing a Fiori role?

Native Fiori app access roles use the format SAP_STUI_<scenario>_TCR (e.g. SAP_STUI_SYSMON_TCR for system monitoring's catalog + group).

After changing/assigning a Fiori role, clear the Fiori app cache with /UI2/INVAL_CACHES (Execution Mode). Fiori-app-specific roles/objects ship with the ST-UI ABAP add-on (upgrade ST-UI for the latest apps); 7.2 embeds the Fiori launchpad by default.

This is one card from the KnowCard library. The full way to learn it — spaced-repetition review, progress tracking, and AI explanations — lives in the KnowCard app. We’re in private beta now; iOS & Android are coming soon.

Join the private beta

Already a tester? Sign in →

More in Managing Security

How are SolMan roles structured, and why does copying SAP roles into your namespace add upgrade work?
How is the SAP Web Dispatcher configured for SolMan, and how does one support multiple backends?
How do you securely expose Fiori apps externally, and why never connect directly to SolMan?
What does the User administration tool do, and what are its three tabs?
What's a common SolMan security pain point, and who should own SolMan authorizations after configuration?
What are the two options for creating SolMan roles, and which has the least maintenance?