{"ref":"content:dynamic-authorisation-with-user-attributes-in-sap-cap-and-ams","page":"/content/dynamic-authorisation-with-user-attributes-in-sap-cap-and-ams","json":"/content/dynamic-authorisation-with-user-attributes-in-sap-cap-and-ams.json","generated":"2026-10-26","drafted_with_ai":true,"entity":{"id":"dynamic-authorisation-with-user-attributes-in-sap-cap-and-ams","title":"Dynamic authorisation with user attributes in SAP CAP and AMS","url":"https://community.sap.com/t5/technology-blog-posts-by-sap/dynamic-authorisation-with-user-attributes-in-sap-cap-and-ams/ba-p/14388853","content_type":"blog","explains":[{"ref":"capability:authorization","applies_to":{"ecosystems":["btp","cap"]}}],"summary":"The same argument as the XSUAA-to-AMS piece, opened from a concrete failure: an acquisition puts 500 users on sales data restricted by division, and role-based access control answers it with Sales_Manager_EMEA, Sales_Manager_APAC and so on until the roles multiply past managing. Attribute-based authorisation replaces the set with one policy carrying a restriction, and the post walks through defining it in AMS against Cloud Identity Services. The clearest statement of role explosion among the three AMS pieces here.","short":"Attribute-based authorisation in CAP with AMS instead of roles","author":"pedro_iranzo","published":"2026-05-04","sources":[{"url":"https://community.sap.com/t5/technology-blog-posts-by-sap/dynamic-authorisation-with-user-attributes-in-sap-cap-and-ams/ba-p/14388853","title":"Dynamic authorisation with user attributes in SAP CAP and AMS — SAP Community","checked":"2026-09-07"}],"provenance":{"discovered_via":[{"source":"source:sap-community","channel":"cap-tag"}],"first_seen":"2026-09-07"},"drafted_with_ai":true,"published_on":"source:sap-community","history":[{"date":"2026-10-17","field":"explains","from":null,"to":"applies_to on capability:authorization (cap, btp)","reason":"Door scope proposed from the title and summary, so a door page lists the piece only where it holds (docs/concepts/content-on-doors.md)."}]},"readings":{"liveness":[{"label":"Checked against the source","tier":"unknown","evidence":"nobody has checked it"},{"label":"Source reachable","tier":"unknown","evidence":"not crawled"},{"label":"Age","tier":"good","evidence":"published 5 months ago"}],"compatibility":[{"label":"Version","tier":"unknown","evidence":"no version declared"},{"label":"Moved since?","tier":"good","evidence":"no recorded change after 2026-05-04"},{"label":"Findings","tier":"good","evidence":"none flagged"}],"reach":[{"value":2389,"unit":"views"},{"value":3,"unit":"comments"},{"value":4,"unit":"likes"}]},"signals":{"views":2389,"likes":4,"comments":3,"metrics_at":"2026-10-25"},"series":null,"edges":{"authors":[]}}