SAP Fiori · Users, Roles & Authorizations

Why are OData service start authorizations entered as 'TADIR services' (R3TR / IWSG) in PFCG rather than as a normal transaction-style authorization?

Answer locked. Get the free KnowCard app to reveal it — plus spaced-repetition review so it actually sticks.

This is one card from the KnowCard library — thousands more across SAP, Linux, Python and more. In the app you get the answer, AI explanations, and cards that come back right before you would forget them. Free to start on iOS, Android or the web.

More in Users, Roles & Authorizations

You assigned the Fiori app's front-end role and the user can launch the app, but every data action errors out. What role did you forget, and on which server do you assign it?

A user can open an analytical Fiori app but the KPI tiles show no data. The ABAP roles are all assigned. Where else must the app-specific role be granted, and to which user?

Which two ABAP transactions manage Fiori users and roles, and what does each do?

A Fiori user logged in fine but can't open one specific app. A colleague claims 'if login worked, access worked.' Why is that wrong?

The delivered transactional-app roles are assigned and the app opens, but users still can't work with the business data. The roles look intact. What's actually missing, and whose job is it to fix?

You activated a fresh OData service and want to add its start authorization to a role, but the service won't show up to be selected. What skipped step causes this?

Start learning today

Free to start — download the app or use it in your browser.