Managing user access in SAP BTP starts with understanding role collections and how to assign them correctly.
You’ll usually assign roles via the SAP BTP cockpit, via the Security > Users menu path. There, you as an administrator can specifically assign one or more role collections to a user. In a typical configuration, you may need to follow these steps:
Select the relevant subaccount.
Create a new role collection or select an existing one via Security > Role Collections.
Assign this role to the user (via their e-mail address or user ID)
Optionally, you can use identity providers to control which users are logged in via which authentication system.
Now, let’s take a look at it in the system. You’ll want to assign your user the authorization to create, edit, and monitor iFlows in SAP Integration Suite, so you need to assign the corresponding role collections for this. These role collections, which you’ll assign in a moment, have been created automatically due to the addition of the Build Integration Scenarios capability to SAP Integration Suite.
First, you switch to SAP BTP and to the subaccount where SAP Integration Suite was created. Then, you navigate to Security > Users, as shown in the figure below. Next, you navigate to the bottom right-hand corner of the screen under the Role Collections heading and click Assign Role Collection.
That will bring up a new window where all available roles that haven’t yet been assigned to the user are displayed. You should select the PI_Administrator, PI_Business_Expert, and PI_Integration_Developer role collections, as in the figure below. Then, click Assign Role Collection to assign the role collections to the user.
After you’ve made these assignments, the authorizations may not yet be effective, so to resolve the problem, restart SAP Integration Suite in an incognito tab. When the role collections are properly assigned, it should look like the screen shown here.
With the PI_Administrator, PI_Business_Expert, and PI_Integration_Developer role collections assigned, your users will have the access they need to create, edit, and monitor iFlows in SAP Integration Suite. Remember to restart the application in an incognito tab if the authorizations don't take effect immediately. Proper role management is a foundational step in keeping your SAP BTP environment secure and functional.
What is SAP Business Technology Platform and what can it do? Get all the information you need in this course. Take a tour of the platform’s tools and services for development, integration, analytics, data management, and more. Learn directly from the experts and see SAP BTP in action with practical demos! Get access to course recordings by clicking the banner below.
Editor’s note: This post has been adapted from a section of the book SAP Cloud Integration Cookbook: Advanced Cloud Integration with SAP Integration Suite by Martin Koch, Thorsten Reisinger, and Marc Urschick. Martin is the managing director of CloudDNA GmbH, an SAP partner in Austria. Thorsten is an integration developer and solution architect at CloudDNA GmbH. Marc is a development lead at CloudDNA GmbH.
This post was originally published 4/2026.