Authorization & IAM

Guide for implementing authorization checks and identity/access management in ABAP Cloud and on-premise systems.

Workflow

1. Determine the user's goal:

   • Implementing authorization checks in ABAP code
   • Creating CDS access controls (DCL)
   • Setting up IAM apps, business catalogs, and business roles (ABAP Cloud)
   • Managing PFCG roles (on-premise)
   • Defining custom authorization objects
   • Understanding restriction types

2. Identify the platform:

   • ABAP Cloud (BTP or S/4HANA embedded) → IAM apps + business catalogs + CL_ABAP_AUTHORIZATION
   • On-premise / Standard ABAP → PFCG roles + AUTHORITY-CHECK

3. Guide implementation with the appropriate authorization model