Correct Answer:

See Explanation below for all solution
Explanation:
Task 7: Restrict the Custom Business Role for US / 1710 and Mark All Other Fields as Not Maintained Objective The purpose of this task is to maintain the restriction values of the custom business role created in the previous task so that project managers only have the minimum access required for their work in the United States.
This task is performed on the custom business role created from the template:
Template Role: SAP_BR_PROJECT_MANAGER_PROF
Custom Role Example Pattern: BR_PROJECT_MANAGER_PROF_US_######
The task requires you to:
maintain only the listed restriction fields,
enter the exact required values for US and 1710,
set all other restriction fields to Not Maintained,
and save the role.
Business Scenario Explanation
This restriction setup is what makes the new custom role safe and fit for purpose.
The business requirement says that end users:
are project managers based in the United States,
should only access relevant US project data,
should not be able to staff or work outside the intended scope,
should only see and maintain data for the allowed organizational scope.
This is achieved by limiting the role to:
US for country-related fields
1710 for company / organizational fields
Everything else must be Not Maintained so that unnecessary access is not left open.
Important Notes
Replace ###### with the last 6 digits of your group number.
Use the values exactly as shown.
Maintain only the fields listed in the table.
Set all other restriction fields to Not Maintained.
Do not leave unrelated fields blank while still restricted.
Restricted + blank is usually wrong.
Not Maintained is the correct setting for all unrelated fields.
Required Restriction Values
Use the following values exactly as shown in your task screenshot.

That means:
Country restriction = US
Org/company restrictions = 1710
Detailed Step-by-Step Procedure
Step 1: Open the app "Maintain Business Roles"
From the SAP S/4HANA Cloud launchpad:
Log in to the system.
Search for:
Maintain Business Roles
Open the app.
Explanation:
This app is where the custom role was created in the previous task and where its restrictions are maintained.
Step 2: Open your custom Project Manager US role
In Maintain Business Roles:
Search for your custom role.
Open the role with ID pattern:
BR_PROJECT_MANAGER_PROF_US_######
Example
If the suffix is 000457, then the role is:
BR_PROJECT_MANAGER_PROF_US_000457
Explanation:
You must open the custom role, not the standard SAP template role.
The restrictions belong to the derived custom role only.
Step 3: Confirm the correct custom role is open
Check the role details and confirm:
the business role ID matches your custom role,
the description matches the US-specific project manager role,
the role is based on template SAP_BR_PROJECT_MANAGER_PROF.
Explanation:
This avoids accidentally changing the wrong role.
Step 4: Click "Maintain Restrictions"
On the custom role page:
Click:
Maintain Restrictions
Explanation:
This opens the detailed restriction maintenance area where access categories and field-level values are controlled.
Step 5: Set the access categories for restriction maintenance
On the restriction page, ensure the access categories are maintained as required for the role.
During your run, these categories were maintained as restricted so values could be entered for the listed fields.
Explanation:
Restriction values can only be maintained correctly when the role is in the right restriction mode.
This step prepares the role so the listed fields can be populated with US / 1710 values.
Step 6: Understand the rule before entering values
This task uses a strict rule:
Keep maintained
Only the fields explicitly listed in the table should be maintained with values.
Set to Not Maintained
Every other restriction field not listed in the table must be marked:
Not Maintained
Explanation:
This is the most important logic in the whole task.
If a field is unrelated and still left as restricted or blank, it can cause validation problems or give more access than intended.
Part A: Maintain the required restriction fields
Step 7: Maintain Bank Country/Region Key
Search for:
Bank Country/Region Key
Then maintain:
Read, Value Help = US
Value Help = US
Explanation:
This ensures the user can only read and search bank-related values for the United States.


Step 8: Maintain Company Code
Search for:
Company Code
Then maintain:
Write, Read, Value Help = 1710
Read, Value Help = 1710
Do not maintain an extra standalone Value Help entry for Company Code unless the task explicitly requires it.
Explanation:
The task table does not include a standalone Company Code Value Help line.
So only the listed two Company Code restriction types should contain 1710.


Step 9: Maintain Purchasing Organization
Search for:
Purchasing Organization
Then maintain:
Write, Read, Value Help = 1710
Read, Value Help = 1710
Value Help = 1710
Explanation:
This ensures all purchasing-organization-related access for the role is limited to organizational value 1710.
Step 10: Maintain Valuation Area
Search for:
Valuation Area
Then maintain:
Read, Value Help = 1710
Value Help = 1710
Explanation:
This limits valuation-related access to the intended organizational scope.
Part B: Set all other fields to Not Maintained
Step 11: Search through the other restriction fields
After entering the required fields, review the remaining restriction objects.
Examples from your run included fields such as:
Accounting Principle
Authorization Group for Business Partners
Billing Type
and many other unrelated restriction fields
Explanation:
These fields were not listed in the task table, so they must not stay restricted.
Step 12: Mark unrelated fields as Not Maintained
For each field not listed in the required table:
Open the field setting / restriction dialog.
Choose:
Not Maintained
Important examples
From your run:
Accounting Principle → Not Maintained
Authorization Group for Business Partners → Not Maintained
Billing Type → Not Maintained
Explanation:
These fields are outside the required US / 1710 restriction list.
If you leave them restricted without a required value, the setup is incorrect.
Step 13: Do not mark the listed fields as Not Maintained
The following must stay maintained with values because they are in the required table:
Bank Country/Region Key
Company Code
Purchasing Organization
Valuation Area
Explanation:
Only the unrelated fields become Not Maintained.
The listed fields must remain restricted with the required values.
Step 14: Save the role
After all required fields are maintained and all other fields are marked Not Maintained:
Click Save
Explanation:
This finalizes the role restrictions.
Without saving, the restriction changes remain incomplete.
Step 15: Verify the restriction result
After saving, verify that:
required fields contain US and 1710 exactly as defined,
unrelated fields are no longer restricted,
the role saves without error.
Explanation:
This is your final proof that the restricted custom role has been completed correctly.
Expected Result
After the task is completed successfully:
the custom role remains based on SAP_BR_PROJECT_MANAGER_PROF,
required US / 1710 restriction fields are maintained,
all unrelated restriction fields are marked Not Maintained,
the role is saved successfully,
the role now reflects minimum necessary access for US-based project managers.

Correct Answer:

See Explanation below for all solution
Explanation:
Objective
The purpose of this task is to check the Bank migration object documentation and assign the additional business role needed so you can successfully migrate bank data into SAP S/4HANA Cloud Public Edition.
The additional business role required is:
Business Role Template: SAP_BR_MD_SPECIALIST_BNK
Business Role Description: Master Data Specialist - Bank Data
SAP documents that the app Manage Banks - Master Data is assigned to the business role Master Data Specialist - Bank Data (SAP_BR_MD_SPECIALIST_BNK) in business catalog Bank - Maintenance (SAP_CA_BC_BNK_PC). That is the role needed for bank master data maintenance and is the missing authorization when the migration cockpit can load data but cannot create banks in the target system.
Business Scenario Explanation
In the previous migration steps, you already assigned the role:
Configuration Expert - Data Migration
BR_CONFIG_EXPERT_DATA_MIG
That role gives access to the migration cockpit itself, meaning you can:
create migration projects,
select migration objects,
upload CSV files,
validate data,
transfer data to staging tables,
and execute migration runs.
However, for the Bank migration object, SAP also requires the authorization to create bank master data in the target system. If that authorization is missing, the migration can still reach the execution stage, but then fail with an authorization message such as:
You are not authorized to create bank data for country/region US
That is why the additional role Master Data Specialist - Bank Data (SAP_BR_MD_SPECIALIST_BNK) must be assigned.
Important Notes
Always replace ###### with the last 6 digits of your group number in later migration steps.
The role to add here is in addition to the migration cockpit role.
Save the user after assigning the role.
Refresh the session after assignment so the new authorization is loaded.
Required Additional Role

Step 1: Review the migration object documentation
Open the Bank migration object in the migration project and review the documentation or role requirement note.
Explanation:
The task explicitly asks you to check the documentation for the Bank migration object and assign the additional role required for migration. SAP's official documentation for bank maintenance shows that bank master maintenance is tied to the role Master Data Specialist - Bank Data (SAP_BR_MD_SPECIALIST_BNK).
Step 2: Open the app "Maintain Business Users"
From the SAP S/4HANA Cloud launchpad:
Log in to SAP S/4HANA Cloud.
Search for:
Maintain Business Users
Open the app.
Explanation:
This app is used to assign business roles to your user.
Step 3: Search for your own user
In Maintain Business Users:
Enter your own user ID in the search field.
Click Go.
Explanation:
You must assign the additional role to your own user because you are the one executing the migration.
Step 4: Open your user record
From the search results:
Click your user entry.
Open the business user detail page.
Explanation:
This opens the maintenance screen where assigned business roles can be changed.
Step 5: Switch to Edit mode
On the user detail page:
Click Edit
Explanation:
Edit mode is required before the assigned business roles list can be updated.
Step 6: Open the "Assigned Business Roles" tab
Inside the business user record:
Click:
Assigned Business Roles
Explanation:
This is where you assign the additional bank master data role.
Step 7: Click Add
In the assigned business roles section:
Click Add
This opens the popup:
Add Business Roles
Explanation:
This popup is used to search for standard SAP business roles.
Step 8: Search for the additional bank role
In the Add Business Roles popup, search for either:
SAP_BR_MD_SPECIALIST_BNK
or
Master Data Specialist - Bank Data
Then select the matching role.
Explanation:
SAP documents that the app Manage Banks - Master Data belongs to the role Master Data Specialist - Bank Data (SAP_BR_MD_SPECIALIST_BNK). That is the role needed for bank creation/maintenance authorization.
Step 9: Add the role
After selecting the role:
Click OK or Apply
Explanation:
This adds the role to your user in draft mode.
Step 10: Save the business user
Back on the business user page:
Click Save
Explanation:
This finalizes the new role assignment.
Step 11: Confirm both migration-related roles are assigned
After saving, verify that your user now has both:
BR_CONFIG_EXPERT_DATA_MIG
SAP_BR_MD_SPECIALIST_BNK
Explanation:
These two roles cover different parts of the scenario:
BR_CONFIG_EXPERT_DATA_MIG → migration cockpit access
SAP_BR_MD_SPECIALIST_BNK → bank master data creation/maintenance authorization Step 12: Refresh your session After saving:
Refresh the browser completely, or
Sign out and sign in again
Explanation:
SAP role assignments may not become active in the current session immediately. A refresh or new login ensures the authorization is reloaded.
Step 13: Return to the migration project
Go back to:
Migrate Your Data
open your project:
Bank Data ######
open migration object:
Bank
Explanation:
Now that the additional bank role is assigned, the system should allow you to migrate bank master data successfully.
Expected Result
After this task is completed successfully:
your user still has the migration role BR_CONFIG_EXPERT_DATA_MIG,
your user also has the additional bank role SAP_BR_MD_SPECIALIST_BNK,
the authorization error for creating bank data should no longer occur,
the Bank migration can proceed successfully.
Screenshots for This Task
Screenshot 1: Assigned Business Roles list including the migration role Use the screenshot from your run where the business user already shows:
Configuration Expert - Data Migration
This screenshot can be used to explain the starting point before the additional role is assigned.
What this screenshot proves
It shows that the migration role alone was not enough for the bank creation authorization.
Screenshot 2: Migration error message
Use the screenshot from your run that shows the message:
You are not authorized to create bank data for country/region US
This is the key evidence that an additional bank master data role was required.
What this screenshot proves
It proves the migration cockpit role was present, but bank maintenance authorization was still missing.
Official SAP Documentation Basis
SAP's official documentation states that the Manage Banks - Master Data app is assigned to:
Master Data Specialist - Bank Data
SAP_BR_MD_SPECIALIST_BNK
within catalog:
Bank - Maintenance
SAP_CA_BC_BNK_PC
This is the basis for the additional role assignment required in this task.