Troubleshooting BTP Account Setup and User Access for SAP Signavio Process Insights

Dr. Sarah Chen breaks down what you need to know

After a dozen failed attempts to grant user access to SAP Signavio Process Insights, the root cause almost always hides in the layered dependencies of SAP BTP: missing entitlements, a misaligned trust configuration, or a role collection that was never assigned. From 16 years of architecting BTP landscapes, I’ve seen that most escalations could have been avoided with a structured diagnostic drill-down. This guide walks you through that exact drill-down, so you can get your business analysts into the tool without delay.

The Real Story

SAP Signavio Process Insights relies on a stack of BTP services that must be explicitly entitled, subscribed, and mapped to the right identity provider. When a user sees “You are not authorized” or the application tile is simply absent, the problem is rarely a broken service—the subscription itself is often healthy. Instead, the failure occurs in the handshake between the subaccount’s entitlements, the corporate identity provider (IdP), and the role collections that grant UI access.

In a recent engagement, a pharmaceutical client spent two days trying to figure out why newly provisioned users could not see the Process Insights launchpad tile. The BTP service instance was running, all health checks were green, yet no user could access it. The culprit? The subaccount had the process-insights service plan subscribed, but the corresponding role collection template had never been applied—no role collection meant zero authorizations, despite an active subscription. This is a classic example of BTP’s architectural rigidity: services and security are deliberately decoupled, and missing one link breaks the entire chain.

What This Means for You

If you are a Basis consultant or BTP administrator tasked with enabling Signavio Process Insights, you must think in terms of four distinct failure domains:

1. Entitlement and subscription plane – Does the subaccount actually own the service and is it active?
2. Trust configuration plane – Is the corporate IdP correctly federated and does it map user identities to BTP shadow users?
3. Authorization plane – Are the correct role collections assigned to users (or groups) in the BTP cockpit?
4. User synchronization plane – Are users being created or updated when they log in, and do they carry the expected attributes?

Neglecting any one of these planes results in either no access, partial access, or cryptic errors like “The application could not be found.” The fact that BTP’s Role Collection Designer and the trust configuration are separate from the subscription lifecycle means you must cross-reference all three after any change—an entitlement update, an IdP certificate rotation, or even a user attribute mapping change can silently break the authorization chain.

Action Items

Follow this sequence to systematically isolate and fix access issues. Each step includes a concrete check and a typical resolution.

1. Verify subaccount entitlements and the active subscription

• Open the BTP cockpit → subaccount → Entitlements and confirm that “SAP Signavio Process Insights” (service plan standard) is listed and assigned.
• Under Instances and Subscriptions, locate the process-insights subscription. The status must be Subscribed and, under “Application Plans,” you should see the plan you intend to use. If it’s missing, go back and add the entitlement via the global account,

References

• Account Setup and User Management in SAP BTP
• SAP Community Hub
• SAP News Center

References

• Account Setup and User Management in SAP BTP
• SAP News Center
• SAP Community Hub