User & Role Management

In SAP Cloud ALM, what does onboarding a project actually involve, and when does it happen?

Before a colleague can act as a full additional SAP Cloud ALM administrator, what access must they be given?

How do you grant the Global Administrator and User Administrator roles to a user in SAP Cloud ALM?

Why should the project manager get the Project Administrator role before onboarding begins, and how is it assigned?

Why keep an authorization matrix when onboarding SAP Cloud ALM users?

Does documenting user types like employees, SAP, or partners change how SAP Cloud ALM behaves?

What are the two options for training accounts when onboarding SAP Cloud ALM users?

Which SAP Cloud ALM tenant can you actually run user training on today?

How do you set up who is responsible for each project role in SAP Cloud ALM?

What project roles does SAP Cloud ALM's standard delivery already provide, and where do they come from?

How do you set up a project to run with the Scrum method in SAP Cloud ALM?

What do a project's three Access Level options control in SAP Cloud ALM, and what happens to older projects?

How do you create a new team in SAP Cloud ALM and make project roles available in it?

In SAP Cloud ALM, what happens to existing user assignments when you deactivate a project role?

What's the difference between the By Roles and By Users assignment modes when staffing a team?

In SAP Cloud ALM, does adding a project role to someone in a team also give them the matching authorization?

What happens when a user is added to a project team they aren't authorized for in SAP Cloud ALM?

How do you add customer-specific project roles in SAP Cloud ALM, and how are they marked?

What does central project administration cover in SAP Cloud ALM?

Where does onboarding fall within the SAP Activate prepare phase in SAP Cloud ALM?

What is the end-to-end procedure for onboarding participants into a SAP Cloud ALM project?

Through which SAP service does every SAP Cloud ALM user get onboarded?

What must happen before a user can log on to SAP Cloud ALM for the first time?

What is the SAP Cloud Identity Services administration console URL pattern, and how does the first admin reach it?

How do you register an employee in the Identity Authentication service so they can later use SAP Cloud ALM?

How do you add an already-registered colleague as a user in SAP Cloud ALM, and what user types can you set?

When adding a user in SAP Cloud ALM, why bother setting the user-type field to "SAP or SAP-partner consultant"?

After a user administrator saves a new user in SAP Cloud ALM, what actually gets that person into the tenant, and which admin actions retrigger the welcome email?

SAP Cloud ALM splits the actors in a project into three responsibilities. How do a user, a project role, and a team differ?

In which SAP Cloud ALM app do you put users into teams, and what happens automatically the moment you assign one?

Among the four Cloud ALM authorization roles, which single capability belongs only to Project Administrator, and how do Project Member and Project Viewer differ?

How does a person's project role decide their authorization role in Cloud ALM, and are authorization roles scoped per project?

How does Cloud ALM's authorization model differ from SAP Solution Manager 7.2, and what standard is it based on?

Why do Cloud ALM administrators never have to build role collections by hand in the SAP BTP subaccount?

In the Cross topics scenario, how do the Global Administrator and Global Auditor cross-application roles differ?

Several Cross topics capabilities follow the same admin-plus-viewer pattern. What do the landscape, user-access, and tag roles each cover?

In the Service scenario, what are the three service collaboration roles and how do their capabilities step down?

The Cloud Integration Automation Service roles are role collections that bundle other collections. How do its Administrator, Expert, and Viewer differ?

Who can create transport nodes and routes in Cloud ALM's cloud transport management, versus only look at them?

In change and deployment management, why isn't approving a feature enough to actually ship it?

What do the process management authoring roles let you build in Cloud ALM?

SAP Cloud ALM role templates aren't named arbitrarily. What does a prefix like imp_pjm_ or ops_hm_ tell you?

In the Operation scenario, which roles handle business service management?

In Cloud ALM's operations monitoring, how do the configuration-and-security-analysis roles compare with the health monitoring administrator?

Health Monitoring ships only a view-only predefined role. What can a user with that role do, and what is the role template called?

Integration and exception monitoring ships three predefined roles. How do the Integration Architect, Integration Owner, and Integration Owner Sensitive differ?

In job and automation monitoring, which predefined role manages the monitoring configuration versus which one only reads it?

Which business process monitoring authorization role can configure and resolve monitoring content, including sensitive data?

Business Process Monitoring operations ships a tiered set of predefined role collections. Name the four tiers and their access.

Real User Monitoring delivers three predefined role collections. How do Real User Analyst, Analyst Administrator, and Analyst Sensitive differ?

For Synthetic User Monitoring, what are the three predefined roles, and what naming pattern do Cloud ALM operations role collections follow?

How does an administrator first reach the Cloud ALM User Management app, and what authorization is required?

A new Cloud ALM user tries to sign in with their S-user credentials and cannot get in. What is going on?

Which filters does the User Management app filter bar offer, and what values can the Status filter take?

What do the five Cloud ALM user Types mean, and which is the default?

How do you maintain a user's authorization roles in the User Management app, and where do standard roles versus custom role collections go?

Who creates approval requests in Cloud ALM, and what routine action can trigger one?

Once an approval request is created, how are approvers notified and where do they act on it?

If several open approval requests exist for the same user and application area, why can the administrator only handle them from that user's detail view?

What three inputs together determine a user's authorizations within a Cloud ALM project?

Compare the Public, Restricted, and Private project access levels in Cloud ALM.

How do the Global Administrator and User Administrator roles differ in SAP Cloud ALM?

What is the PMO team in a SAP Cloud ALM project, and why can't it be deleted?

What must be true before you can create and maintain users in the SAP Cloud Identity Services admin console?

Which two roles govern the SAP Business Transformation Center scoping capability, and what can each do with digital blueprints?

Where do the ready-made Cloud ALM role collections come from, and on what basis are they distinguished from one another?

For User and Access Management itself, why are two separate role sets provided rather than one?

What four elements make up a Cloud ALM role collection's definition?

Why should you add delivered SAP roles into your own newly created role collections rather than editing SAP's delivered collections directly?

Walk through the steps to create your own custom role collection in the SAP BTP cockpit.

What are the two ways to assign standard and custom role collections to Cloud ALM users?

Between the SAP BTP cockpit and the Cloud ALM User Management app, which is the recommended way to assign roles, and why?

You changed a user's authorizations or project team assignment in Cloud ALM but the user still sees the old permissions. Why, and what resolves it?

Cloud ALM distinguishes project roles from authorization roles. Why does the difference matter?

Why is granting access not enough to consider project onboarding complete in Cloud ALM?

What changed for the Process Hierarchy Author role in February 2024, and why was it separated out?

Why is the standard-delivered PMO team a safe starting point for orchestrating a Cloud ALM project?

A project role and an authorization role are not the same thing in SAP Cloud ALM. What does an authorization role actually control, and where is it assigned?

Within project and task management, how do the Project Lead, Project Member, and Project Viewer roles differ over the same set of objects?

Which roles cover the SAP Readiness Check capability in Cloud ALM?

When you create a new Cloud ALM project, which access level is applied by default?

Why do team assignments matter for a Restricted or Private project but not for a Public one?

In the User Management app, what happens when you click on a single user, and what can you do from there?