UAA Authorization Scopes in xs-security.json
Tutorials that teach this
Docs explaining this concept
Prerequisites
- Concept xs-security.json Security Descriptor (Scopes, Role Templates, XSUAA Service Binding)
- Concept xs-security.json Security Descriptor File The `xs-security.json` security descriptor file is a configuration file that developers use to define authorization information for business users in their applications, including scopes, attributes, and role templates. It is passed when creating or updating an instance of the SAP Authorization and Trust Management Service (XSUAA), binding the application's security model to the platform. Developers must follow the [Application Security Descriptor Configuration Syntax](https://help.sap.com/docs/btp/sap-business-technology-platform/517895a9612241259d6941dbf9ad81cb?locale=en-US&state=PRODUCTION&version=Cloud) when authoring the file, and should take care to make only [compatible changes](https://help.sap.com/docs/btp/sap-business-technology-platform/c3b892e703174badb93f1ab35f76c354?locale=en-US&state=PRODUCTION&version=Cloud) when updating an existing service instance to avoid breaking deployed applications.
- Concept CDS-based Authorization Annotations in CAP
- Concept UAA xs-security.json Configuration