Role-based security for business objects is disabled by default. You need to explicitly enable role-based security in the Security tab of the business object.
