Hi Folks,
In our project we have implemented around 200 applications based on HANA DB and Any DB. Now we are creating the roles for each applications. So just to make you better understand the issue I am taking an example of an application "Manage Supplier Invoice for Accounts Payable Accountant - Procurement". For this particular application I have assigned the PFCG role for business catalog SAP_BR_AP_ACCOUNTANT_PROCURMENT to the test user along with R3TR IWSV MM_SUPPLIER_INVOICE_MANAGE_001 & R3TR IWSG MM_SUPPLIER_INVOICE_MANAGE services. But now user is getting an error that "user has no authorization for operation READ on object BUS2081" also in SU53 it is showing that activity is missing for some authorization object.
So I manually added the missing authorization objects in Roles --> Authorization and now application is working fine. But here my concern is that I have never read it anywhere that authorization objects have to be assigned manually to FIORI roles, we just need to assign the catalog, group and the required service like I did. I request you to help me understand that whether it is required to manually add objects in FIORI role or share any document on FIORI roles and authorization.
Thanks