See Explanation below for all solution
Explanation:
Purpose: Identify your own six-digit suffix and use it consistently in every task.
Open the user menu at the top-right of SAP S/4HANA Cloud.
Read your user name and note the last six digits.
Use those last six digits in every place the task PDF shows ######.
Example used in this guide: 000013

See Explanation below for all solution
Explanation:
Objective
The purpose of this task is to assign the required business catalogs to the custom all-employee business role created in the previous task. These catalogs provide the applications that will later be shown in the launchpad space and page for all employees.
The catalogs that must be assigned are:
HCM – Employee Self Service
SAP_HCM_BC_EMP_PC
Concur – Employee Self-Service
SAP_CON_BC_CTE_ESS_PC
Business Scenario Explanation
In the previous task, you created a new custom all-employee business role, for example:
Z_EMPLOYEES_ALL_######
That role exists, but on its own it does not yet provide app access.
In SAP S/4HANA Cloud, app access is granted through business catalogs.
This means the role must now be connected to the catalogs that contain the apps employees need.
Later, these catalogs will feed the launchpad page content so end users can easily find the relevant applications.
Important Notes
Always replace ###### with the last 6 digits of your group number.
Use the exact catalog names and IDs.
Assign both required catalogs.
Save the role after assignment.
Do not assign the wrong catalog variant.
Required Catalogs
Assign exactly these two business catalogs:
Business Catalog
Business Catalog ID
HCM – Employee Self Service
SAP_HCM_BC_EMP_PC
Concur – Employee Self-Service
SAP_CON_BC_CTE_ESS_PC
Detailed Step-by-Step Procedure
Step 1: Open the app “Maintain Business Roles”
From the SAP S/4HANA Cloud launchpad:
Log in to SAP S/4HANA Cloud.
Use the app search.
Search for:
Maintain Business Roles
Open the app.
Explanation:
This app is used to maintain business roles, assign catalogs, assign launchpad spaces, and maintain restrictions.
Step 2: Search for your custom all-employee business role
Inside Maintain Business Roles:
Search for your business role ID:
Z_EMPLOYEES_ALL_######
Example
If your suffix is 000013, search for:
Z_EMPLOYEES_ALL_000013
Open the role.
Explanation:
You must open the custom all-employee role created in the previous task, not a template role and not a standard SAP role.

Step 3: Verify the correct role is open
Confirm that the role details show:
Business Role ID = Z_EMPLOYEES_ALL_######
Business Role Description = All Employee Role ######
Explanation:
This ensures you are assigning catalogs to the correct business role.
Step 4: Go to the “Business Catalogs” tab
Inside the role:
Click the tab:
Business Catalogs
Explanation:
This tab is used to assign the business catalogs that define which apps and app authorizations the role provides.
Step 5: Click Add
In the Assigned Business Catalogs section:
Click Add
This opens the dialog:
Add Business Catalogs
Explanation:
The Add popup is used to search for and assign SAP-delivered business catalogs to the custom role.
Step 6: Search for the first catalog
In the Add Business Catalogs popup:
Search for:
SAP_HCM_BC_EMP_PC
or
HCM – Employee Self Service
Select:
HCM – Employee Self Service
Business Catalog ID: SAP_HCM_BC_EMP_PC
Explanation:
This catalog provides employee self-service apps and is required by the task.

Step 7: Search for the second catalog
Still in the Add Business Catalogs popup:
Search for:
SAP_CON_BC_CTE_ESS_PC
or
Concur – Employee Self-Service
Select:
Concur – Employee Self-Service
Business Catalog ID: SAP_CON_BC_CTE_ESS_PC
Explanation:
This catalog provides the Concur employee self-service content and is also explicitly required by the task.
Step 8: Add the selected catalogs
After selecting both catalogs:
Click OK or Apply
Explanation:
This adds the selected catalogs to the custom role in draft mode.
Step 9: Verify both catalogs are listed
Back in the Business Role screen, verify that both assigned catalogs are visible:
SAP_HCM_BC_EMP_PC
SAP_CON_BC_CTE_ESS_PC
Explanation:
This confirms that the required app authorizations have now been attached to the role.
Step 10: Save the role
Click:
Save
Explanation:
This finalizes the catalog assignment.
Without saving, the catalogs remain only in draft and the role will not provide the required app content.
Step 11: Verify the result after save
After saving, check again that the role still shows both business catalogs in the assigned list.
Explanation:
This confirms the task was completed successfully and the role is ready for the next step, which is launchpad space/page content.
Expected Result
After this task is completed successfully:
the custom all-employee role has both required business catalogs assigned, the role is saved successfully, the role now provides the app authorizations required for employee self-service content, the launchpad page can later use these catalogs to add the required tiles.

See Explanation below for all solution
Explanation:
Objective
The purpose of this task is to create a custom business role for project managers in the United States by using the standard SAP template role Project Manager – Professional Services and then restricting the role so users only have the minimum access needed for their job.
The template role used is:
Template Business Role ID: SAP_BR_PROJECT_MANAGER_PROF
Template Business Role Description: Project Manager – Professional Services The new custom role must be created with exact values defined in the task.
Business Scenario Explanation
In this simulation, you are building a restricted custom role for project managers who work only in the United States.
The goal is to ensure that these end users:
can create and edit projects,
can access only projects occurring in the United States,
cannot work with projects or staffing outside the US,
have only the minimum level of authorization needed.
This is done in two major parts:
Create a new custom business role from the standard SAP template
Restrict the role values so only US-related data is allowed
Important Notes
Always replace ###### with the last 6 digits of your group number.
Every value must be entered exactly as shown.
Even one missing space or incorrect character can cause the simulation validation to fail.
You must also create and assign a launchpad space as part of the custom role creation.
Required Values for Role Creation
Use the following values exactly as shown in the task image.
Parameter
Value
New Business Role ID
BR_PROJECT_MANAGER_PROF_US_######
New Business Role Description
Project Manager – Professional Services – US – ######
Option for Launchpad Spaces
Create and Assign Spaces Based on Space Templates
New Space ID
ZBR_PROJECT_MANAGER_PROF_US_######
Activate IAM Apps
Yes (check the box)
Example
If your suffix is 000457, the values become:
BR_PROJECT_MANAGER_PROF_US_000457
Project Manager – Professional Services – US – 000457
ZBR_PROJECT_MANAGER_PROF_US_000457
Detailed Step-by-Step Procedure
Part 1: Open the standard template role
Step 1: Open the app “Maintain Business Roles”
From the SAP S/4HANA Cloud launchpad:
Log in to SAP S/4HANA Cloud.
Use the app search.
Search for:
Maintain Business Roles
Open the app.
Explanation:
This app is used to maintain standard and custom business roles.
Because this task requires creating a custom role from an existing template, this is the correct starting app.

Step 2: Search for the template role
Inside Maintain Business Roles:
In the search/filter area, search for:
SAP_BR_PROJECT_MANAGER_PROF
or
Project Manager – Professional Services
Open the standard SAP template role.
Explanation:
You must start from the standard template role because the task explicitly says to use the template for:
Project Manager – Professional Services
SAP_BR_PROJECT_MANAGER_PROF

Part 2: Create the custom role from the template
Step 3: Click “Create Derived Business Role”
On the template role page:
Click:
Create Derived Business Role
Explanation:
This function creates a customer-specific copy based on the standard SAP business role template.
It preserves the delivered role content but allows you to define your own role ID, description, restrictions, and launchpad space.
Step 4: Enter the custom role information
In the creation popup, enter the values exactly as follows:
Template = SAP_BR_PROJECT_MANAGER_PROF
New Business Role ID = BR_PROJECT_MANAGER_PROF_US_######
New Business Role Description = Project Manager – Professional Services – US – ###### Option for Launchpad Spaces = Create and Assign Spaces Based on Space Templates New Space ID = ZBR_PROJECT_MANAGER_PROF_US_###### Activate IAM Apps = checked Explanation:
These values define the new custom project manager role that will later be restricted to US-only access.
The space option is important because the task expects the role to include its own launchpad space.

Step 5: Confirm creation
Click OK
Explanation:
SAP now creates the custom role derived from the template and assigns the new launchpad space at the same time.
Part 3: Verify the newly created custom role
Step 6: Review the new custom role
After creation, SAP opens the new custom role.
Verify:
Business Role ID = BR_PROJECT_MANAGER_PROF_US_######
Business Role Description = Project Manager – Professional Services – US – ###### Business Role Template ID = SAP_BR_PROJECT_MANAGER_PROF Explanation:
This confirms the derived role was created correctly from the right SAP template.
Part 4: Maintain role restrictions
Step 7: Open “Maintain Restrictions”
On the custom role page:
Click:
Maintain Restrictions
Explanation:
This is the most important part of the task.
You are not only creating a role – you are also limiting the role so it only allows US-related values.
Step 8: Understand the rule for restriction maintenance
The PDF/task logic is:
Fields explicitly listed in the restriction table → keep them Restricted and enter the required values All other fields not listed in the task table → set them to Not Maintained Explanation:
This is essential.
If extra fields remain restricted or blank, the role may not validate correctly.
The safest approach is:
only maintain the required fields,
mark all unrelated fields as Not Maintained.

Part 5: Enter the required US restrictions
From your exercise run, the maintained values included restrictions such as:
Keep these kinds of fields restricted with US/1710 values where required Examples from your run:
Bank Country/Region Key
Read, Value Help = US
Value Help = US
Company Code
use 1710 only where the task table explicitly requires it
Purchasing Organization
use 1710 where required
Valuation Area
use 1710 where required
Explanation:
These are the exact business restrictions that make the role usable only for the intended geography and business scope.
Step 9: Set unrelated restriction fields to “Not Maintained”
For every field not included in the task’s restriction list, choose:
Not Maintained
Examples from your screenshots included fields like:
Accounting Principle
Authorization Group for Business Partners
Billing Type
These should be Not Maintained unless they are explicitly listed in the task’s required restriction table.
Explanation:
This removes unnecessary access and matches the task wording that all other fields should be set to Not Maintained.

Step 10: Save the restrictions
After all required values are entered and unrelated fields are marked Not Maintained:
Click Save
Explanation:
This saves the restriction profile of the role.
If you do not save here, the role will remain incomplete or in draft.
Part 6: Verify launchpad space and page creation
Step 11: Go to Launchpad Spaces
In the custom role:
Open the tab:
Launchpad Spaces
Verify that the assigned space exists:
ZBR_PROJECT_MANAGER_PROF_US_######
Explanation:
Because you selected Create and Assign Spaces Based on Space Templates, SAP should have created and assigned the launchpad space automatically.
Step 12: Verify the created space
Open the assigned space and confirm:
the custom space exists,
it is customer-managed,
the pages are assigned correctly.
Explanation:
This proves that the new business role has its own launchpad structure as required by the task.
Expected Result
After this task is completed successfully:
a new custom role exists based on SAP_BR_PROJECT_MANAGER_PROF,
the role uses the exact required ID and description,
the role has a custom launchpad space,
IAM apps are activated,
restrictions are maintained for US-only access,
all irrelevant fields are set to Not Maintained,
the role is saved successfully.

See Explanation below for all solution
Explanation:
Objective
The purpose of this task is to check the Bank migration object documentation and assign the additional business role needed so you can successfully migrate bank data into SAP S/4HANA Cloud Public Edition.
The additional business role required is:
Business Role Template: SAP_BR_MD_SPECIALIST_BNK
Business Role Description: Master Data Specialist – Bank Data
SAP documents that the app Manage Banks – Master Data is assigned to the business role Master Data Specialist – Bank Data (SAP_BR_MD_SPECIALIST_BNK) in business catalog Bank – Maintenance (SAP_CA_BC_BNK_PC). That is the role needed for bank master data maintenance and is the missing authorization when the migration cockpit can load data but cannot create banks in the target system.
Business Scenario Explanation
In the previous migration steps, you already assigned the role:
Configuration Expert – Data Migration
BR_CONFIG_EXPERT_DATA_MIG
That role gives access to the migration cockpit itself, meaning you can:
create migration projects,
select migration objects,
upload CSV files,
validate data,
transfer data to staging tables,
and execute migration runs.
However, for the Bank migration object, SAP also requires the authorization to create bank master data in the target system. If that authorization is missing, the migration can still reach the execution stage, but then fail with an authorization message such as:
You are not authorized to create bank data for country/region US
That is why the additional role Master Data Specialist – Bank Data (SAP_BR_MD_SPECIALIST_BNK) must be assigned.
Important Notes
Always replace ###### with the last 6 digits of your group number in later migration steps.
The role to add here is in addition to the migration cockpit role.
Save the user after assigning the role.
Refresh the session after assignment so the new authorization is loaded.
Required Additional Role

Step 1: Review the migration object documentation
Open the Bank migration object in the migration project and review the documentation or role requirement note.
Explanation:
The task explicitly asks you to check the documentation for the Bank migration object and assign the additional role required for migration. SAP’s official documentation for bank maintenance shows that bank master maintenance is tied to the role Master Data Specialist – Bank Data (SAP_BR_MD_SPECIALIST_BNK).
Step 2: Open the app “Maintain Business Users”
From the SAP S/4HANA Cloud launchpad:
Log in to SAP S/4HANA Cloud.
Search for:
Maintain Business Users
Open the app.
Explanation:
This app is used to assign business roles to your user.
Step 3: Search for your own user
In Maintain Business Users:
Enter your own user ID in the search field.
Click Go.
Explanation:
You must assign the additional role to your own user because you are the one executing the migration.
Step 4: Open your user record
From the search results:
Click your user entry.
Open the business user detail page.
Explanation:
This opens the maintenance screen where assigned business roles can be changed.
Step 5: Switch to Edit mode
On the user detail page:
Click Edit
Explanation:
Edit mode is required before the assigned business roles list can be updated.
Step 6: Open the “Assigned Business Roles” tab
Inside the business user record:
Click:
Assigned Business Roles
Explanation:
This is where you assign the additional bank master data role.
Step 7: Click Add
In the assigned business roles section:
Click Add
This opens the popup:
Add Business Roles
Explanation:
This popup is used to search for standard SAP business roles.
Step 8: Search for the additional bank role
In the Add Business Roles popup, search for either:
SAP_BR_MD_SPECIALIST_BNK
or
Master Data Specialist – Bank Data
Then select the matching role.
Explanation:
SAP documents that the app Manage Banks – Master Data belongs to the role Master Data Specialist – Bank Data (SAP_BR_MD_SPECIALIST_BNK). That is the role needed for bank creation/maintenance authorization.
Step 9: Add the role
After selecting the role:
Click OK or Apply
Explanation:
This adds the role to your user in draft mode.
Step 10: Save the business user
Back on the business user page:
Click Save
Explanation:
This finalizes the new role assignment.
Step 11: Confirm both migration-related roles are assigned
After saving, verify that your user now has both:
BR_CONFIG_EXPERT_DATA_MIG
SAP_BR_MD_SPECIALIST_BNK
Explanation:
These two roles cover different parts of the scenario:
BR_CONFIG_EXPERT_DATA_MIG → migration cockpit access
SAP_BR_MD_SPECIALIST_BNK → bank master data creation/maintenance authorization Step 12: Refresh your session After saving:
Refresh the browser completely, or
Sign out and sign in again
Explanation:
SAP role assignments may not become active in the current session immediately. A refresh or new login ensures the authorization is reloaded.
Step 13: Return to the migration project
Go back to:
Migrate Your Data
open your project:
Bank Data ######
open migration object:
Bank
Explanation:
Now that the additional bank role is assigned, the system should allow you to migrate bank master data successfully.
Expected Result
After this task is completed successfully:
your user still has the migration role BR_CONFIG_EXPERT_DATA_MIG,
your user also has the additional bank role SAP_BR_MD_SPECIALIST_BNK,
the authorization error for creating bank data should no longer occur,
the Bank migration can proceed successfully.
Screenshots for This Task
Screenshot 1: Assigned Business Roles list including the migration role Use the screenshot from your run where the business user already shows:
Configuration Expert – Data Migration
This screenshot can be used to explain the starting point before the additional role is assigned.
What this screenshot proves
It shows that the migration role alone was not enough for the bank creation authorization.
Screenshot 2: Migration error message
Use the screenshot from your run that shows the message:
You are not authorized to create bank data for country/region US
This is the key evidence that an additional bank master data role was required.
What this screenshot proves
It proves the migration cockpit role was present, but bank maintenance authorization was still missing.
Official SAP Documentation Basis
SAP’s official documentation states that the Manage Banks – Master Data app is assigned to:
Master Data Specialist – Bank Data
SAP_BR_MD_SPECIALIST_BNK
within catalog:
Bank – Maintenance
SAP_CA_BC_BNK_PC
This is the basis for the additional role assignment required in this task.

See Explanation below for all solution
Explanation:
Objective
The purpose of this task is to use the correct SAP app to verify that the bank master data migrated in the previous task was created successfully in the target system.
The correct verification app is:
Manage Banks – Master Data
SAP’s documentation for bank maintenance assigns this app to the bank master data role and uses it for maintaining and checking bank records, which matches the verification step after migration.
Business Scenario Explanation
In the previous migration tasks, you:
created the migration project,
selected the Bank migration object,
prepared and uploaded the bank data,
validated and transferred it to staging tables,
completed mapping tasks,
migrated the two bank records.
However, a migration is not considered complete until the data is verified in the target application used for ongoing business maintenance.
For the Bank migration object, that target verification app is:
Manage Banks – Master Data
This app allows you to search for the migrated banks and confirm that the data now exists in SAP S/4HANA Cloud Public Edition.
Important Notes
Always replace ###### with the last 6 digits of your group number.
Use the exact bank values that were migrated.
Verification must be done in the correct app, not only in the migration cockpit.
The expected bank records are the two banks from the previous task.
Correct Verification App
Purpose
App
Verify migrated bank master data
Manage Banks – Master Data
SAP documents that bank master maintenance is handled through the bank master data application and the associated bank maintenance role/catalog, which is why this is the correct end-user verification app after bank migration.
Data to Verify
You should verify the two migrated banks:
Bank 1
Bank Country/Region = US
Bank Key = A######
Bank Name = Bank of A######
Bank 2
Bank Country/Region = US
Bank Key = Z######
Bank Name = Bank of Z######
Example
If your suffix is 000013, verify:
US / A000013 / Bank of A000013
US / Z000013 / Bank of Z000013
Detailed Step-by-Step Procedure
Step 1: Return to the SAP Fiori launchpad
After finishing the migration:
Go back to the SAP S/4HANA Cloud homepage.
Explanation:
The verification must be performed in the target business app, not only from the migration results screen.
Step 2: Open the app “Manage Banks – Master Data”
From the launchpad search:
Search for:
Manage Banks – Master Data
Open the app.
Explanation:
This is the correct app for checking whether the migrated bank master records now exist in the target system.
Step 3: Search for the first migrated bank
In Manage Banks – Master Data:
In Bank Country/Region, enter:
US
In Bank Key, enter:
A######
Click Go
Example
If your suffix is 000013, search for:
Bank Country/Region = US
Bank Key = A000013
Explanation:
This checks whether the first migrated bank was created successfully.
Step 4: Verify the first bank details
Confirm that the search result shows the correct bank record:
Bank Country/Region = US
Bank Key = A######
Bank Name = Bank of A######
You can also verify address data if visible, such as:
Street = West Chester Pike
City = Newtown Square
Explanation:
This confirms that the first bank master record exists in the target system after migration.
Step 5: Search for the second migrated bank
Clear or update the search criteria and enter:
Bank Country/Region = US
Bank Key = Z######
Click Go
Example
If your suffix is 000013, search for:
Bank Country/Region = US
Bank Key = Z000013
Explanation:
This checks whether the second migrated bank was created successfully.
Step 6: Verify the second bank details
Confirm that the second search result shows:
Bank Country/Region = US
Bank Key = Z######
Bank Name = Bank of Z######
You can also verify address data if visible, such as:
Street = Lenox Road
City = Atlanta
Explanation:
This confirms that the second bank master record exists in the target system after migration.
Step 7: Confirm successful verification
If both banks are visible in Manage Banks – Master Data, the migration verification is successful.
Explanation:
This is the final proof that the migration did not only complete technically in the cockpit, but also posted the expected business data into the target application.
Expected Result
After this task is completed successfully:
the app Manage Banks – Master Data is used for verification,
Bank 1 is visible:
US / A###### / Bank of A######
Bank 2 is visible:
US / Z###### / Bank of Z######
the migrated bank data is confirmed as successfully created in the target system.

See Explanation below for all solution
Explanation:
Objective
The purpose of this task is to create a custom launchpad space and page for the all-employee business role so employees can easily find the apps granted through the assigned business catalogs.
This task belongs to the all-employee role created in the previous tasks, for example:
Business Role ID: Z_EMPLOYEES_ALL_######
The page values shown in the task are:
Page Title: General
Page Description: General

Business Scenario Explanation
In SAP S/4HANA Cloud, business catalogs grant the app authorizations, but users still need a clean launchpad structure so they can actually find those apps easily.
That is why this task requires creating:
a Launchpad Space
a Launchpad Page
for the all-employee role.
The space acts like a container in the launchpad navigation, and the page acts like the content area where app tiles will later be displayed.
Important Notes
Always replace ###### with the last 6 digits of your group number.
Use the exact text values shown in the task.
The task image explicitly shows:
Page Title = General
Page Description = General
Save each object after creation.
Required Values
From the task image, use:
Parameter
Value
Page Title
General
Page Description
General
Additional execution values used in your run
During your actual execution, the custom launchpad space/page used this pattern:
Space ID: Z_ALL_EMP_######
Space Description: General
Space Title: General
Page ID: Z_ALL_EMP_######
Page Title: General
Page Description: General
Objective
The purpose of this task is to create a custom launchpad space and page for the all-employee business role so employees can easily find the apps granted through the assigned business catalogs.
This task belongs to the all-employee role created in the previous tasks, for example:
Business Role ID: Z_EMPLOYEES_ALL_######
The page values shown in the task are:
Page Title: General
Page Description: General
Business Scenario Explanation
In SAP S/4HANA Cloud, business catalogs grant the app authorizations, but users still need a clean launchpad structure so they can actually find those apps easily.
That is why this task requires creating:
a Launchpad Space
a Launchpad Page
for the all-employee role.
The space acts like a container in the launchpad navigation, and the page acts like the content area where app tiles will later be displayed.
Important Notes
Always replace ###### with the last 6 digits of your group number.
Use the exact text values shown in the task.
The task image explicitly shows:
Page Title = General
Page Description = General
Save each object after creation.
Required Values
From the task image, use:
Parameter
Value
Page Title
General
Page Description
General
Additional execution values used in your run
During your actual execution, the custom launchpad space/page used this pattern:
Space ID: Z_ALL_EMP_######
Space Description: General
Space Title: General
Page ID: Z_ALL_EMP_######
Page Title: General
Page Description: General

See Explanation below for all solution
Explanation:
Objective
The purpose of this task is to create a test user in SAP S/4HANA Cloud for demonstrating professional services business processes to project managers during a Fit-to-Standard workshop.
This task is completed by importing:
worker data
work agreement data
The import must use the exact values provided in the task.
Business Scenario Explanation
In this scenario, you need a test user that represents a Project Manager.
This user is needed so that project-management-related professional services processes can later be demonstrated in the system.
Instead of creating every record manually, SAP asks you to use the import process.
This is faster and also ensures the worker and agreement data are loaded in the correct structure.

Important Notes
Always replace ###### with the last 6 digits of your group number.
Use the values exactly as provided.
Do not change spaces, punctuation, or capitalization unless the task explicitly tells you to.
A wrong value, extra space, or missing number can cause task validation failure.

If your suffix is 000013, then the values become:
Worker ID = 1000013
User Name = PM000013
First Name = Project
Last Name = Manager 000013
Email = [email protected]
Step 1: Open the app used for importing users/workers
From the SAP S/4HANA Cloud launchpad:
Log in to the system.
Open the relevant import app used in your simulation for importing worker and work agreement data.
Start creation of a new import.
Explanation:
This task is not done by manual user creation only.
The scenario specifically says to create the new business user by importing the new user’s data.
The import will load the basic worker and work agreement records that are required before the business user is fully usable.
Step 2: Enter the import name
When creating the import:
In the field Import Name, enter:
Project Manager Test User ######
Replace ###### with your own 6-digit group suffix.
Example
For suffix 000013, enter:
Project Manager Test User 000013
Explanation:
The import name identifies your import package and should be entered exactly as required by the task.
Step 3: Prepare the worker data
In the worker import structure, enter these values:
Worker ID = 1######
User Name = PM######
Worker Type = BUP003
First Name = Project
Last Name = Manager ######
Email = PM######@dummy.sap.com
Language = EN
Company Code = 1010
Cost Center = 10101501
Example for 000013
Worker ID = 1000013
User Name = PM000013
Last Name = Manager 000013
Email = [email protected]
Explanation:
These values define the person as a project manager test worker and connect the worker to:
the company code,
the cost center,
the default language,
and the worker type required by the scenario.
Step 4: Prepare the work agreement data
In the work agreement import structure, enter:
Start Date = today’s date in YYYYMMDD format
End Date = 99991231
Example
If today’s date is March 30, 2026:
Start Date = 20260330
End Date = 99991231
Explanation:
The end date 99991231 is used to indicate an open-ended validity.
This is common in SAP for a record that should remain valid indefinitely.
Step 5: Upload or enter the import data
Depending on the app behavior in your exercise:
Upload the prepared import file or
Enter the values into the import structure manually if the system provides inline entry.
Explanation:
The business scenario says the business user must be created by importing worker and work agreement data.
This means the relevant master data must be loaded into the system first before the user is fully available.
Step 6: Start the import
After all values are entered:
Validate the data if the system provides a validation option.
Start the import.
Explanation:
Validation checks whether:
required fields are filled,
date formats are correct,
codes like BUP003, 1010, and 10101501 are valid,
and the import structure is complete.
Step 7: Wait for the import to complete
Monitor the import process.
Wait until the import shows success or completed status.
Explanation:
Only after the import is complete will the worker and work agreement records exist in the system and be usable for further user setup and role assignment.
Step 8: Verify the imported worker/business user
After the import finishes:
Open the relevant business user / worker maintenance app.
Search using:
Worker ID
or User Name
Confirm that the imported user exists.
Explanation:
This step ensures the imported data was actually created and is available for later process demonstrations.
Expected Result
After the import is completed successfully:
a new test worker/user exists in the system,
the worker has the required professional-services identity,
the work agreement is valid,
the user can be used in later project manager demonstrations.

See Explanation below for all solution
Explanation:
Task 7: Restrict the Custom Business Role for US / 1710 and Mark All Other Fields as Not Maintained Objective The purpose of this task is to maintain the restriction values of the custom business role created in the previous task so that project managers only have the minimum access required for their work in the United States.
This task is performed on the custom business role created from the template:
Template Role: SAP_BR_PROJECT_MANAGER_PROF
Custom Role Example Pattern: BR_PROJECT_MANAGER_PROF_US_######
The task requires you to:
maintain only the listed restriction fields,
enter the exact required values for US and 1710,
set all other restriction fields to Not Maintained,
and save the role.
Business Scenario Explanation
This restriction setup is what makes the new custom role safe and fit for purpose.
The business requirement says that end users:
are project managers based in the United States,
should only access relevant US project data,
should not be able to staff or work outside the intended scope,
should only see and maintain data for the allowed organizational scope.
This is achieved by limiting the role to:
US for country-related fields
1710 for company / organizational fields
Everything else must be Not Maintained so that unnecessary access is not left open.
Important Notes
Replace ###### with the last 6 digits of your group number.
Use the values exactly as shown.
Maintain only the fields listed in the table.
Set all other restriction fields to Not Maintained.
Do not leave unrelated fields blank while still restricted.
Restricted + blank is usually wrong.
Not Maintained is the correct setting for all unrelated fields.
Required Restriction Values
Use the following values exactly as shown in your task screenshot.

That means:
Country restriction = US
Org/company restrictions = 1710
Detailed Step-by-Step Procedure
Step 1: Open the app “Maintain Business Roles”
From the SAP S/4HANA Cloud launchpad:
Log in to the system.
Search for:
Maintain Business Roles
Open the app.
Explanation:
This app is where the custom role was created in the previous task and where its restrictions are maintained.
Step 2: Open your custom Project Manager US role
In Maintain Business Roles:
Search for your custom role.
Open the role with ID pattern:
BR_PROJECT_MANAGER_PROF_US_######
Example
If the suffix is 000457, then the role is:
BR_PROJECT_MANAGER_PROF_US_000457
Explanation:
You must open the custom role, not the standard SAP template role.
The restrictions belong to the derived custom role only.
Step 3: Confirm the correct custom role is open
Check the role details and confirm:
the business role ID matches your custom role,
the description matches the US-specific project manager role,
the role is based on template SAP_BR_PROJECT_MANAGER_PROF.
Explanation:
This avoids accidentally changing the wrong role.
Step 4: Click “Maintain Restrictions”
On the custom role page:
Click:
Maintain Restrictions
Explanation:
This opens the detailed restriction maintenance area where access categories and field-level values are controlled.
Step 5: Set the access categories for restriction maintenance
On the restriction page, ensure the access categories are maintained as required for the role.
During your run, these categories were maintained as restricted so values could be entered for the listed fields.
Explanation:
Restriction values can only be maintained correctly when the role is in the right restriction mode.
This step prepares the role so the listed fields can be populated with US / 1710 values.
Step 6: Understand the rule before entering values
This task uses a strict rule:
Keep maintained
Only the fields explicitly listed in the table should be maintained with values.
Set to Not Maintained
Every other restriction field not listed in the table must be marked:
Not Maintained
Explanation:
This is the most important logic in the whole task.
If a field is unrelated and still left as restricted or blank, it can cause validation problems or give more access than intended.
Part A: Maintain the required restriction fields
Step 7: Maintain Bank Country/Region Key
Search for:
Bank Country/Region Key
Then maintain:
Read, Value Help = US
Value Help = US
Explanation:
This ensures the user can only read and search bank-related values for the United States.


Step 8: Maintain Company Code
Search for:
Company Code
Then maintain:
Write, Read, Value Help = 1710
Read, Value Help = 1710
Do not maintain an extra standalone Value Help entry for Company Code unless the task explicitly requires it.
Explanation:
The task table does not include a standalone Company Code Value Help line.
So only the listed two Company Code restriction types should contain 1710.


Step 9: Maintain Purchasing Organization
Search for:
Purchasing Organization
Then maintain:
Write, Read, Value Help = 1710
Read, Value Help = 1710
Value Help = 1710
Explanation:
This ensures all purchasing-organization-related access for the role is limited to organizational value 1710.
Step 10: Maintain Valuation Area
Search for:
Valuation Area
Then maintain:
Read, Value Help = 1710
Value Help = 1710
Explanation:
This limits valuation-related access to the intended organizational scope.
Part B: Set all other fields to Not Maintained
Step 11: Search through the other restriction fields
After entering the required fields, review the remaining restriction objects.
Examples from your run included fields such as:
Accounting Principle
Authorization Group for Business Partners
Billing Type
and many other unrelated restriction fields
Explanation:
These fields were not listed in the task table, so they must not stay restricted.
Step 12: Mark unrelated fields as Not Maintained
For each field not listed in the required table:
Open the field setting / restriction dialog.
Choose:
Not Maintained
Important examples
From your run:
Accounting Principle → Not Maintained
Authorization Group for Business Partners → Not Maintained
Billing Type → Not Maintained
Explanation:
These fields are outside the required US / 1710 restriction list.
If you leave them restricted without a required value, the setup is incorrect.
Step 13: Do not mark the listed fields as Not Maintained
The following must stay maintained with values because they are in the required table:
Bank Country/Region Key
Company Code
Purchasing Organization
Valuation Area
Explanation:
Only the unrelated fields become Not Maintained.
The listed fields must remain restricted with the required values.
Step 14: Save the role
After all required fields are maintained and all other fields are marked Not Maintained:
Click Save
Explanation:
This finalizes the role restrictions.
Without saving, the restriction changes remain incomplete.
Step 15: Verify the restriction result
After saving, verify that:
required fields contain US and 1710 exactly as defined,
unrelated fields are no longer restricted,
the role saves without error.
Explanation:
This is your final proof that the restricted custom role has been completed correctly.
Expected Result
After the task is completed successfully:
the custom role remains based on SAP_BR_PROJECT_MANAGER_PROF,
required US / 1710 restriction fields are maintained,
all unrelated restriction fields are marked Not Maintained,
the role is saved successfully,
the role now reflects minimum necessary access for US-based project managers.