Business Scenario
Your company is planning to develop a set of cloud-based applications based on the SAP Cloud Application Programming Model (CAP), and these applications will be deployed to the SAP Business Technology Platform (SAP BTP) as extension applications for the SAP Core back end systems.
In this exercise, you will perform the following task: Create user roles to protect your service entities.
Now, you can create roles to define different authorizations for your application. For example, you might want to ensure that some people can view data but are not able to edit them.
Note
Note that some of the services that this learning journey links to can incur costs.
Task 1: Create and Configure User Roles
Steps
Assign new roles to the RiskManagementService.
If not there, go back to the Storyboard tab of the application.
There are two ways to open the Authorization editor:
Choose the Open Editor dropdown menu in the upper left part of the storyboard and select User Roles.
Select the role icon (little personicon) next to RiskManagementService in the Services tile.
In both cases, the Authorization Editor opens.
In the Authorization Editor, make sure the RiskManagementService is opened.
Choose the personicon on the right, and select New Role to add a new role.
Enter the role name, for example, RiskViewer.
Choose Save.
Choose again the personicon on the right, and select New Role to add a new role.
Enter the role name, for example, RiskManager.
Choose Save.
Grant permissions on the Service Entities for Risks and Mitigations.
Select the entity Risks from the tree on the left side.
Choose the person icon on the right, and select the RiskManager role you created before.
Make sure that the privileges are selected as All.
Choose again the person icon on the right, and select the RiskViewer role you created before.
Make sure that the privileges are selected as Read.
Select the entity Mitigations from the tree on the left side.
Choose the person icon on the right, and select the RiskManager role you created before.
Make sure that the privileges are selected as All.
Choose again the person icon on the right, and select the RiskViewer role you created before.
Make sure that the privileges are selected as Read.
