Correct Answer:

See Explanation below for all solution
Explanation:
Objective
The purpose of this task is to create a test user in SAP S/4HANA Cloud for demonstrating professional services business processes to project managers during a Fit-to-Standard workshop.
This task is completed by importing:
worker data
work agreement data
The import must use the exact values provided in the task.
Business Scenario Explanation
In this scenario, you need a test user that represents a Project Manager.
This user is needed so that project-management-related professional services processes can later be demonstrated in the system.
Instead of creating every record manually, SAP asks you to use the import process.
This is faster and also ensures the worker and agreement data are loaded in the correct structure.

Important Notes
Always replace ###### with the last 6 digits of your group number.
Use the values exactly as provided.
Do not change spaces, punctuation, or capitalization unless the task explicitly tells you to.
A wrong value, extra space, or missing number can cause task validation failure.

If your suffix is 000013, then the values become:
Worker ID = 1000013
User Name = PM000013
First Name = Project
Last Name = Manager 000013
Email = [email protected]
Step 1: Open the app used for importing users/workers
From the SAP S/4HANA Cloud launchpad:
Log in to the system.
Open the relevant import app used in your simulation for importing worker and work agreement data.
Start creation of a new import.
Explanation:
This task is not done by manual user creation only.
The scenario specifically says to create the new business user by importing the new user's data.
The import will load the basic worker and work agreement records that are required before the business user is fully usable.
Step 2: Enter the import name
When creating the import:
In the field Import Name, enter:
Project Manager Test User ######
Replace ###### with your own 6-digit group suffix.
Example
For suffix 000013, enter:
Project Manager Test User 000013
Explanation:
The import name identifies your import package and should be entered exactly as required by the task.
Step 3: Prepare the worker data
In the worker import structure, enter these values:
Worker ID = 1######
User Name = PM######
Worker Type = BUP003
First Name = Project
Last Name = Manager ######
Email = PM######@dummy.sap.com
Language = EN
Company Code = 1010
Cost Center = 10101501
Example for 000013
Worker ID = 1000013
User Name = PM000013
Last Name = Manager 000013
Email = [email protected]
Explanation:
These values define the person as a project manager test worker and connect the worker to:
the company code,
the cost center,
the default language,
and the worker type required by the scenario.
Step 4: Prepare the work agreement data
In the work agreement import structure, enter:
Start Date = today's date in YYYYMMDD format
End Date = 99991231
Example
If today's date is March 30, 2026:
Start Date = 20260330
End Date = 99991231
Explanation:
The end date 99991231 is used to indicate an open-ended validity.
This is common in SAP for a record that should remain valid indefinitely.
Step 5: Upload or enter the import data
Depending on the app behavior in your exercise:
Upload the prepared import file or
Enter the values into the import structure manually if the system provides inline entry.
Explanation:
The business scenario says the business user must be created by importing worker and work agreement data.
This means the relevant master data must be loaded into the system first before the user is fully available.
Step 6: Start the import
After all values are entered:
Validate the data if the system provides a validation option.
Start the import.
Explanation:
Validation checks whether:
required fields are filled,
date formats are correct,
codes like BUP003, 1010, and 10101501 are valid,
and the import structure is complete.
Step 7: Wait for the import to complete
Monitor the import process.
Wait until the import shows success or completed status.
Explanation:
Only after the import is complete will the worker and work agreement records exist in the system and be usable for further user setup and role assignment.
Step 8: Verify the imported worker/business user
After the import finishes:
Open the relevant business user / worker maintenance app.
Search using:
Worker ID
or User Name
Confirm that the imported user exists.
Explanation:
This step ensures the imported data was actually created and is available for later process demonstrations.
Expected Result
After the import is completed successfully:
a new test worker/user exists in the system,
the worker has the required professional-services identity,
the work agreement is valid,
the user can be used in later project manager demonstrations.

Correct Answer:

See Explanation below for all solution
Explanation:
Task 7: Restrict the Custom Business Role for US / 1710 and Mark All Other Fields as Not Maintained Objective The purpose of this task is to maintain the restriction values of the custom business role created in the previous task so that project managers only have the minimum access required for their work in the United States.
This task is performed on the custom business role created from the template:
Template Role: SAP_BR_PROJECT_MANAGER_PROF
Custom Role Example Pattern: BR_PROJECT_MANAGER_PROF_US_######
The task requires you to:
maintain only the listed restriction fields,
enter the exact required values for US and 1710,
set all other restriction fields to Not Maintained,
and save the role.
Business Scenario Explanation
This restriction setup is what makes the new custom role safe and fit for purpose.
The business requirement says that end users:
are project managers based in the United States,
should only access relevant US project data,
should not be able to staff or work outside the intended scope,
should only see and maintain data for the allowed organizational scope.
This is achieved by limiting the role to:
US for country-related fields
1710 for company / organizational fields
Everything else must be Not Maintained so that unnecessary access is not left open.
Important Notes
Replace ###### with the last 6 digits of your group number.
Use the values exactly as shown.
Maintain only the fields listed in the table.
Set all other restriction fields to Not Maintained.
Do not leave unrelated fields blank while still restricted.
Restricted + blank is usually wrong.
Not Maintained is the correct setting for all unrelated fields.
Required Restriction Values
Use the following values exactly as shown in your task screenshot.

That means:
Country restriction = US
Org/company restrictions = 1710
Detailed Step-by-Step Procedure
Step 1: Open the app "Maintain Business Roles"
From the SAP S/4HANA Cloud launchpad:
Log in to the system.
Search for:
Maintain Business Roles
Open the app.
Explanation:
This app is where the custom role was created in the previous task and where its restrictions are maintained.
Step 2: Open your custom Project Manager US role
In Maintain Business Roles:
Search for your custom role.
Open the role with ID pattern:
BR_PROJECT_MANAGER_PROF_US_######
Example
If the suffix is 000457, then the role is:
BR_PROJECT_MANAGER_PROF_US_000457
Explanation:
You must open the custom role, not the standard SAP template role.
The restrictions belong to the derived custom role only.
Step 3: Confirm the correct custom role is open
Check the role details and confirm:
the business role ID matches your custom role,
the description matches the US-specific project manager role,
the role is based on template SAP_BR_PROJECT_MANAGER_PROF.
Explanation:
This avoids accidentally changing the wrong role.
Step 4: Click "Maintain Restrictions"
On the custom role page:
Click:
Maintain Restrictions
Explanation:
This opens the detailed restriction maintenance area where access categories and field-level values are controlled.
Step 5: Set the access categories for restriction maintenance
On the restriction page, ensure the access categories are maintained as required for the role.
During your run, these categories were maintained as restricted so values could be entered for the listed fields.
Explanation:
Restriction values can only be maintained correctly when the role is in the right restriction mode.
This step prepares the role so the listed fields can be populated with US / 1710 values.
Step 6: Understand the rule before entering values
This task uses a strict rule:
Keep maintained
Only the fields explicitly listed in the table should be maintained with values.
Set to Not Maintained
Every other restriction field not listed in the table must be marked:
Not Maintained
Explanation:
This is the most important logic in the whole task.
If a field is unrelated and still left as restricted or blank, it can cause validation problems or give more access than intended.
Part A: Maintain the required restriction fields
Step 7: Maintain Bank Country/Region Key
Search for:
Bank Country/Region Key
Then maintain:
Read, Value Help = US
Value Help = US
Explanation:
This ensures the user can only read and search bank-related values for the United States.


Step 8: Maintain Company Code
Search for:
Company Code
Then maintain:
Write, Read, Value Help = 1710
Read, Value Help = 1710
Do not maintain an extra standalone Value Help entry for Company Code unless the task explicitly requires it.
Explanation:
The task table does not include a standalone Company Code Value Help line.
So only the listed two Company Code restriction types should contain 1710.


Step 9: Maintain Purchasing Organization
Search for:
Purchasing Organization
Then maintain:
Write, Read, Value Help = 1710
Read, Value Help = 1710
Value Help = 1710
Explanation:
This ensures all purchasing-organization-related access for the role is limited to organizational value 1710.
Step 10: Maintain Valuation Area
Search for:
Valuation Area
Then maintain:
Read, Value Help = 1710
Value Help = 1710
Explanation:
This limits valuation-related access to the intended organizational scope.
Part B: Set all other fields to Not Maintained
Step 11: Search through the other restriction fields
After entering the required fields, review the remaining restriction objects.
Examples from your run included fields such as:
Accounting Principle
Authorization Group for Business Partners
Billing Type
and many other unrelated restriction fields
Explanation:
These fields were not listed in the task table, so they must not stay restricted.
Step 12: Mark unrelated fields as Not Maintained
For each field not listed in the required table:
Open the field setting / restriction dialog.
Choose:
Not Maintained
Important examples
From your run:
Accounting Principle → Not Maintained
Authorization Group for Business Partners → Not Maintained
Billing Type → Not Maintained
Explanation:
These fields are outside the required US / 1710 restriction list.
If you leave them restricted without a required value, the setup is incorrect.
Step 13: Do not mark the listed fields as Not Maintained
The following must stay maintained with values because they are in the required table:
Bank Country/Region Key
Company Code
Purchasing Organization
Valuation Area
Explanation:
Only the unrelated fields become Not Maintained.
The listed fields must remain restricted with the required values.
Step 14: Save the role
After all required fields are maintained and all other fields are marked Not Maintained:
Click Save
Explanation:
This finalizes the role restrictions.
Without saving, the restriction changes remain incomplete.
Step 15: Verify the restriction result
After saving, verify that:
required fields contain US and 1710 exactly as defined,
unrelated fields are no longer restricted,
the role saves without error.
Explanation:
This is your final proof that the restricted custom role has been completed correctly.
Expected Result
After the task is completed successfully:
the custom role remains based on SAP_BR_PROJECT_MANAGER_PROF,
required US / 1710 restriction fields are maintained,
all unrelated restriction fields are marked Not Maintained,
the role is saved successfully,
the role now reflects minimum necessary access for US-based project managers.