Tell us what you think

We want to create the best possible experience for our learners. Your feedback helps us to improve the experience for everyone.

Note

Assigning Role Collections

Objectives

After completing this lesson, you will be able to:

Assign role collections

Assign Role Collections: Exercise Overview

Scenario

You will add a role collection to access your deployed application through the SAP BTP cockpit with an authenticated and authorized user.

As the name implies, role collections "group together authorizations for resources and services. Role collections consist of individual roles. Role collections are account-specific. Role collections that exist in the global account don’t exist in the subaccounts. Likewise, role collections in subaccounts aren’t available in the global account."¹.

The way this application is designed, the deployed service can only be accessed when a user has a corresponding role collection assigned. If users tried to open the application without this authorization, they would get a Forbidden message. In this exercise, you will see how to assign the role collection to a user.

Prerequisite

You added the UI and approuter to the mta.yaml file.

Watching the Simulation and/or Performing the Steps

Note

In this exercise you find a simulation and a list of all steps, displayed in the simulation. Performing the steps below allows you to follow the simulation in your own trial account.

Assign Role Collections

Exercise

Assign Role Collections

Start Exercise

Task 1: Assign a Role Collection

Steps

Assign a role collection.
1. In your subaccount in the SAP BTP cockpit tab navigate to the Security tab. Choose the Default identity provider link.
2. Enter the email address for your SAP BTP account (the one you used to log on) and choose the Show Assignments button.
3. Click on the Assign Role Collection button.
4. From the list, choose RiskManager-DEV. Click on the Assign Role Collection button.
  Now you are ready to access the application!
5. In the left pane of your subaccount, navigate to the Cloud Foundry tab and choose Spaces.
6. Select your space.
7. Verify that the risk-management application has been deployed and that the risk-management-approuter is running.
8. Choose the row risk-management-approuter.
9. Choose the link under Application Routes.
10. Verify that the deployed application is running and showing its home screen.
11. Press the Risks tile and then in the application the Go button.
  You should see the final deployed application with the data:
  Note
  In some cases, your browser might still have cached the authorization information from the previous app call. When you still receive the Forbidden message, try to either delete your browser cache and cookies or to close and reopen your browser.

Result

You have assigned a role collection to access the application through the SAP BTP Cockpit.

Reference Links: Assigning Role Collections

For your convenience this section contains the external references in this lesson.

If links are used multiple times within the text, only the first location is mentioned in the reference table.

Reference Links: Role Collections

Ref#	Section	Context text fragment	Brief description	Link
1	Assign Role Collections	As the name implies, role collections	Role collections	https://help.sap.com/viewer/65de2977205c403bbc107264b8eccf4b/LATEST/en-US/0039cf082d3d43eba9200fe15647922a.html

Save progress to your learning plan by logging in or creating an account

Continue to quiz