Security in SAP Build Work Zone

Different personas with different authorizations need to access the system to perform different kinds of actions. Personas either lean more towards IT or business respectively.

There are three layers in the SAP Workzone Architecture:

Identity Provider Configuration Layer: In this layer, default configuration is conducted where high-level personas are assigned to dedicated user groups on the SAP IAS

Platform Configuration Layer: To access any service or applicated deployed in the BTP subaccount, the underlying platform layer of role collections needs to be assigned to the user who is trying to access it.

Application Configuration Layer: This refers to roles that need to be assigned to access content federated apps.