Troubleshooting Fiori / S4 authorization example

Below will be a typical case how we determine and trace a user authorization failure for Fiori / S4

Case 1: user LEO1 login to Fiori Launchpad and try to click any tiles

run /IWFND/ERROR_LOG

Run ST01 trace for LEO1

Trace in Fiori server did not show any authorization failures

Go to backend S4 to enable the ST01 security trace

Note: since S4 has 3 application servers, so from Fiori to backend S4 it goes via logon group load balancing, so it could hit any of these 3 servers.

We'll have to enable the trace on all 3 S4 app servers.

Go SM51 to choose servers

Enable trace

So when LEO1 gets authorization errors again, we checked the trace on one of the app servers, and RC=4 means this user is missing authorization S_SERVICE

Considering LEO1 is a developer, so we have no concerns to assign full access of S_SERVICE to the developer role

Now please remember to ask LEO1 to refresh the webpage by CTRL+F5, and reload the Fiori pages.

How LEO1 is able to click the tiles without errors!