SAP Knowledge Base Article - Public

2911993 - Controlling access to Custom CDS View External API

Symptom

  • In a test scenario, a Custom CDS View has been created as an External API and a Communication Scenario, Arrangement, and User has been created to access the External API
  • In Production, use of generic users is not permitted and the External API needs to be accessed by the business user using their own userid and password
  • How can this be done?

Environment

SAP S/4HANA Cloud

Resolution

  • An OData service can only be called by:
    1. A Business User (with a Userid prefixed CB) if the OData service is added via an App and a Custom Catalog extension extending a Business Catalog and the user is assigned a role containing the same Business Catalog
    2. A Communication User (with a Userid prefixed CC), if the OData service is part of a Communication Scenario and the user is used within the Communication Arrangement defined with the Communication Scenario
  • The Production Scenario described in the Symptom section of this KBA would need to use option 1 while the test scenario uses option 2 

Keywords

OData, Service, generic, business, user, External API, Communication , KBA , BC-SRV-APS-GKE , Generic CDS Key User Editor , BC-SRV-APS-IAM , Identity and Access Management , How To

Product

SAP S/4HANA Cloud Public Edition all versions ; SAP S/4HANA Cloud all versions