Managing Security

Someone needs to configure ChaRM in SolMan. Should they get the administrator role, and what distinguishes the three SolMan user types?

One SAP Web Dispatcher needs to front both your SolMan and your ERP system. Does that work, and what makes the difference between one dispatcher and one-per-system?

A user is missing an entire work area's Fiori tiles. Why is editing the SAP_SMWORK* role's authorization objects the wrong fix?

You're assigning SolMan composite roles per tool and aren't sure which role covers which function. Of SAP's three security guides, which one do you open, and who should own this afterward?

What are the four functional types of SAP SolMan single roles, and the role each type plays?

In the SolMan User administration tool a role shows yellow status. What does that actually mean, and what step do people forget before assigning a user?

You assigned the native Fiori role SAP_STUI_SYSMON_TCR but the app still won't appear for the user. What's the most likely skipped step?

Two ways to build SolMan roles: copy the whole SAP set into your namespace, or create one custom-object role and directly assign SAP's roles. Which is lower maintenance, and what would override that choice?

For exposing SolMan Fiori apps to external users, why must you never let an external connection reach SolMan directly, and what limits what you can even expose?