When using the "groups" functionality, it is possible to assign individual users to a group folder, or it is possible to assign a role to a folder.
I know copied roles arent supported for data management/admin/ etc, but is it possible to create custom roles to control group functionality?
If so, what makes an ABAP role visible in the SPM UI? As non-SPM roles are not visible.
For new groups created you can either assign users or roles or both.
Yes in 2.1 you can create custom roles and assign them to group folders, for this your custom role needs to have "SAP_XA" or "SAP_XSA" in the technical name. Only these roles will show up in the group management roles tab.
This limitation does not exist in SPM 3.0 You can build new custom roles with authorizations objects.