SIMULATION
Migrate Bank Data
Business Scenario
You are responsible for migrating bank data into the SAP S/4HANA Cloud Public Edition system. You have determined the best method is Migrate Data Using Staging Tables, as you only have a couple banks to migrate.
Prerequisites:
Note:
In the task below, always replace ###### with the last 6 digits of your group number.
Note:
Make sure to use the EXACT names/values/spaces as they are listed in the task. Even forgetting a space or a number will cause the validation of the task to fail and be marked as incorrect.
Task:
Check the documentation for the Bank migration object and assign the additional business role required to ensure you can migrate bank data into the system.

See Explanation below for all solution
Explanation:
Objective
The purpose of this task is to check the Bank migration object documentation and assign the additional business role needed so you can successfully migrate bank data into SAP S/4HANA Cloud Public Edition.
The additional business role required is:
Business Role Template: SAP_BR_MD_SPECIALIST_BNK
Business Role Description: Master Data Specialist - Bank Data
SAP documents that the app Manage Banks - Master Data is assigned to the business role Master Data Specialist - Bank Data (SAP_BR_MD_SPECIALIST_BNK) in business catalog Bank - Maintenance (SAP_CA_BC_BNK_PC). That is the role needed for bank master data maintenance and is the missing authorization when the migration cockpit can load data but cannot create banks in the target system.
Business Scenario Explanation
In the previous migration steps, you already assigned the role:
Configuration Expert - Data Migration
BR_CONFIG_EXPERT_DATA_MIG
That role gives access to the migration cockpit itself, meaning you can:
create migration projects,
select migration objects,
upload CSV files,
validate data,
transfer data to staging tables,
and execute migration runs.
However, for the Bank migration object, SAP also requires the authorization to create bank master data in the target system. If that authorization is missing, the migration can still reach the execution stage, but then fail with an authorization message such as:
You are not authorized to create bank data for country/region US
That is why the additional role Master Data Specialist - Bank Data (SAP_BR_MD_SPECIALIST_BNK) must be assigned.
Important Notes
Always replace ###### with the last 6 digits of your group number in later migration steps.
The role to add here is in addition to the migration cockpit role.
Save the user after assigning the role.
Refresh the session after assignment so the new authorization is loaded.
Required Additional Role

Step 1: Review the migration object documentation
Open the Bank migration object in the migration project and review the documentation or role requirement note.
Explanation:
The task explicitly asks you to check the documentation for the Bank migration object and assign the additional role required for migration. SAP's official documentation for bank maintenance shows that bank master maintenance is tied to the role Master Data Specialist - Bank Data (SAP_BR_MD_SPECIALIST_BNK).
Step 2: Open the app "Maintain Business Users"
From the SAP S/4HANA Cloud launchpad:
Log in to SAP S/4HANA Cloud.
Search for:
Maintain Business Users
Open the app.
Explanation:
This app is used to assign business roles to your user.
Step 3: Search for your own user
In Maintain Business Users:
Enter your own user ID in the search field.
Click Go.
Explanation:
You must assign the additional role to your own user because you are the one executing the migration.
Step 4: Open your user record
From the search results:
Click your user entry.
Open the business user detail page.
Explanation:
This opens the maintenance screen where assigned business roles can be changed.
Step 5: Switch to Edit mode
On the user detail page:
Click Edit
Explanation:
Edit mode is required before the assigned business roles list can be updated.
Step 6: Open the "Assigned Business Roles" tab
Inside the business user record:
Click:
Assigned Business Roles
Explanation:
This is where you assign the additional bank master data role.
Step 7: Click Add
In the assigned business roles section:
Click Add
This opens the popup:
Add Business Roles
Explanation:
This popup is used to search for standard SAP business roles.
Step 8: Search for the additional bank role
In the Add Business Roles popup, search for either:
SAP_BR_MD_SPECIALIST_BNK
or
Master Data Specialist - Bank Data
Then select the matching role.
Explanation:
SAP documents that the app Manage Banks - Master Data belongs to the role Master Data Specialist - Bank Data (SAP_BR_MD_SPECIALIST_BNK). That is the role needed for bank creation/maintenance authorization.
Step 9: Add the role
After selecting the role:
Click OK or Apply
Explanation:
This adds the role to your user in draft mode.
Step 10: Save the business user
Back on the business user page:
Click Save
Explanation:
This finalizes the new role assignment.
Step 11: Confirm both migration-related roles are assigned
After saving, verify that your user now has both:
BR_CONFIG_EXPERT_DATA_MIG
SAP_BR_MD_SPECIALIST_BNK
Explanation:
These two roles cover different parts of the scenario:
BR_CONFIG_EXPERT_DATA_MIG → migration cockpit access
SAP_BR_MD_SPECIALIST_BNK → bank master data creation/maintenance authorization Step 12: Refresh your session After saving:
Refresh the browser completely, or
Sign out and sign in again
Explanation:
SAP role assignments may not become active in the current session immediately. A refresh or new login ensures the authorization is reloaded.
Step 13: Return to the migration project
Go back to:
Migrate Your Data
open your project:
Bank Data ######
open migration object:
Bank
Explanation:
Now that the additional bank role is assigned, the system should allow you to migrate bank master data successfully.
Expected Result
After this task is completed successfully:
your user still has the migration role BR_CONFIG_EXPERT_DATA_MIG,
your user also has the additional bank role SAP_BR_MD_SPECIALIST_BNK,
the authorization error for creating bank data should no longer occur,
the Bank migration can proceed successfully.
Screenshots for This Task
Screenshot 1: Assigned Business Roles list including the migration role Use the screenshot from your run where the business user already shows:
Configuration Expert - Data Migration
This screenshot can be used to explain the starting point before the additional role is assigned.
What this screenshot proves
It shows that the migration role alone was not enough for the bank creation authorization.
Screenshot 2: Migration error message
Use the screenshot from your run that shows the message:
You are not authorized to create bank data for country/region US
This is the key evidence that an additional bank master data role was required.
What this screenshot proves
It proves the migration cockpit role was present, but bank maintenance authorization was still missing.
Official SAP Documentation Basis
SAP's official documentation states that the Manage Banks - Master Data app is assigned to:
Master Data Specialist - Bank Data
SAP_BR_MD_SPECIALIST_BNK
within catalog:
Bank - Maintenance
SAP_CA_BC_BNK_PC
This is the basis for the additional role assignment required in this task.

SIMULATION
Create a Custom Business Role with Restrictions
Business Scenario:
You are building a custom business role with restrictions to ensure the end users assigned the role have only the minimum level of access necessary to complete their core job tasks. The end users are project managers based in the United States. They should only be able to create projects, edit projects, and access projects that are occurring in the United States. They should not be able to staff any resources outside of the United States. Write, Read, and Value Help access should be restricted to only the United States for all relevant fields.
Prerequisites:
Note: In the task below, always replace ###### with the last 6 digits of your group number.
Note: Make sure to use the EXACT names/values/spaces as they are listed in the task. Even forgetting a space or a number will cause the validation of the task to fail and be marked as incorrect.
Task:
Use the template for the business role Project Manager - Professional Services (SAP_BR_PROJECT_MANAGER_PROF) to create a new business role with the following information:

See Explanation below for all solution
Explanation:
Objective
The purpose of this task is to create a custom business role for project managers in the United States by using the standard SAP template role Project Manager - Professional Services and then restricting the role so users only have the minimum access needed for their job.
The template role used is:
Template Business Role ID: SAP_BR_PROJECT_MANAGER_PROF
Template Business Role Description: Project Manager - Professional Services The new custom role must be created with exact values defined in the task.
Business Scenario Explanation
In this simulation, you are building a restricted custom role for project managers who work only in the United States.
The goal is to ensure that these end users:
can create and edit projects,
can access only projects occurring in the United States,
cannot work with projects or staffing outside the US,
have only the minimum level of authorization needed.
This is done in two major parts:
Create a new custom business role from the standard SAP template
Restrict the role values so only US-related data is allowed
Important Notes
Always replace ###### with the last 6 digits of your group number.
Every value must be entered exactly as shown.
Even one missing space or incorrect character can cause the simulation validation to fail.
You must also create and assign a launchpad space as part of the custom role creation.
Required Values for Role Creation
Use the following values exactly as shown in the task image.
Parameter
Value
New Business Role ID
BR_PROJECT_MANAGER_PROF_US_######
New Business Role Description
Project Manager - Professional Services - US - ######
Option for Launchpad Spaces
Create and Assign Spaces Based on Space Templates
New Space ID
ZBR_PROJECT_MANAGER_PROF_US_######
Activate IAM Apps
Yes (check the box)
Example
If your suffix is 000457, the values become:
BR_PROJECT_MANAGER_PROF_US_000457
Project Manager - Professional Services - US - 000457
ZBR_PROJECT_MANAGER_PROF_US_000457
Detailed Step-by-Step Procedure
Part 1: Open the standard template role
Step 1: Open the app "Maintain Business Roles"
From the SAP S/4HANA Cloud launchpad:
Log in to SAP S/4HANA Cloud.
Use the app search.
Search for:
Maintain Business Roles
Open the app.
Explanation:
This app is used to maintain standard and custom business roles.
Because this task requires creating a custom role from an existing template, this is the correct starting app.

Step 2: Search for the template role
Inside Maintain Business Roles:
In the search/filter area, search for:
SAP_BR_PROJECT_MANAGER_PROF
or
Project Manager - Professional Services
Open the standard SAP template role.
Explanation:
You must start from the standard template role because the task explicitly says to use the template for:
Project Manager - Professional Services
SAP_BR_PROJECT_MANAGER_PROF

Part 2: Create the custom role from the template
Step 3: Click "Create Derived Business Role"
On the template role page:
Click:
Create Derived Business Role
Explanation:
This function creates a customer-specific copy based on the standard SAP business role template.
It preserves the delivered role content but allows you to define your own role ID, description, restrictions, and launchpad space.
Step 4: Enter the custom role information
In the creation popup, enter the values exactly as follows:
Template = SAP_BR_PROJECT_MANAGER_PROF
New Business Role ID = BR_PROJECT_MANAGER_PROF_US_######
New Business Role Description = Project Manager - Professional Services - US - ###### Option for Launchpad Spaces = Create and Assign Spaces Based on Space Templates New Space ID = ZBR_PROJECT_MANAGER_PROF_US_###### Activate IAM Apps = checked Explanation:
These values define the new custom project manager role that will later be restricted to US-only access.
The space option is important because the task expects the role to include its own launchpad space.

Step 5: Confirm creation
Click OK
Explanation:
SAP now creates the custom role derived from the template and assigns the new launchpad space at the same time.
Part 3: Verify the newly created custom role
Step 6: Review the new custom role
After creation, SAP opens the new custom role.
Verify:
Business Role ID = BR_PROJECT_MANAGER_PROF_US_######
Business Role Description = Project Manager - Professional Services - US - ###### Business Role Template ID = SAP_BR_PROJECT_MANAGER_PROF Explanation:
This confirms the derived role was created correctly from the right SAP template.
Part 4: Maintain role restrictions
Step 7: Open "Maintain Restrictions"
On the custom role page:
Click:
Maintain Restrictions
Explanation:
This is the most important part of the task.
You are not only creating a role - you are also limiting the role so it only allows US-related values.
Step 8: Understand the rule for restriction maintenance
The PDF/task logic is:
Fields explicitly listed in the restriction table → keep them Restricted and enter the required values All other fields not listed in the task table → set them to Not Maintained Explanation:
This is essential.
If extra fields remain restricted or blank, the role may not validate correctly.
The safest approach is:
only maintain the required fields,
mark all unrelated fields as Not Maintained.

Part 5: Enter the required US restrictions
From your exercise run, the maintained values included restrictions such as:
Keep these kinds of fields restricted with US/1710 values where required Examples from your run:
Bank Country/Region Key
Read, Value Help = US
Value Help = US
Company Code
use 1710 only where the task table explicitly requires it
Purchasing Organization
use 1710 where required
Valuation Area
use 1710 where required
Explanation:
These are the exact business restrictions that make the role usable only for the intended geography and business scope.
Step 9: Set unrelated restriction fields to "Not Maintained"
For every field not included in the task's restriction list, choose:
Not Maintained
Examples from your screenshots included fields like:
Accounting Principle
Authorization Group for Business Partners
Billing Type
These should be Not Maintained unless they are explicitly listed in the task's required restriction table.
Explanation:
This removes unnecessary access and matches the task wording that all other fields should be set to Not Maintained.

Step 10: Save the restrictions
After all required values are entered and unrelated fields are marked Not Maintained:
Click Save
Explanation:
This saves the restriction profile of the role.
If you do not save here, the role will remain incomplete or in draft.
Part 6: Verify launchpad space and page creation
Step 11: Go to Launchpad Spaces
In the custom role:
Open the tab:
Launchpad Spaces
Verify that the assigned space exists:
ZBR_PROJECT_MANAGER_PROF_US_######
Explanation:
Because you selected Create and Assign Spaces Based on Space Templates, SAP should have created and assigned the launchpad space automatically.
Step 12: Verify the created space
Open the assigned space and confirm:
the custom space exists,
it is customer-managed,
the pages are assigned correctly.
Explanation:
This proves that the new business role has its own launchpad structure as required by the task.
Expected Result
After this task is completed successfully:
a new custom role exists based on SAP_BR_PROJECT_MANAGER_PROF,
the role uses the exact required ID and description,
the role has a custom launchpad space,
IAM apps are activated,
restrictions are maintained for US-only access,
all irrelevant fields are set to Not Maintained,
the role is saved successfully.