managing-security-administrators-in-your-subaccount-feature-set-a-6752c4b.md

Managing Security Administrators in Your Subaccount [Feature Set A]

Running on the cloud management tools feature set A: When you create a subaccount, SAP BTP automatically grants your user the role for the administration of business users and their authorizations in the subaccount. Having this role, you can also add or remove other users who will then also be user and role administrators of this subaccount.

After having created a subaccount in SAP BTP, your user automatically has the administration role. This means that your user also has the Security tab, where you can perform security administration tasks. As a security administrator, you can manage authentication and authorization in this subaccount, such as configuring trust to identity providers, and assigning role collections to business users.

You can delegate the security administration to other users. Simply add the users as security administrators to your subaccount. SAP BTP grants the User & Role Administrator role to these users.

To see the User & Role Administrator role and all users with this role, go to your subaccount (see Navigate in the Cockpit). Choose Security > Administrators.

You can also remove the users who are not supposed to have this role.

Note:

All users with the User & Role Administrator role can manage this subaccount, including the security administration tasks.

Related Information

User and Member Management

Cloud Management Tools — Feature Set Overview