C_CPE_2409 · Question #30
Which entity in XSUAA holds several scopes?
The correct answer is B. Role. In XSUAA, a Role is the entity that aggregates multiple scopes - it acts as a named bundle of fine-grained permissions (scopes) that can be grouped together for assignment purposes. This is defined in the xs-security.json descriptor, where each role template references one or…
Question
Which entity in XSUAA holds several scopes?
Options
- ARole collection
- BRole
- CScope
- DUser group
How the community answered
(17 responses)- A6% (1)
- B88% (15)
- C6% (1)
Explanation
In XSUAA, a Role is the entity that aggregates multiple scopes - it acts as a named bundle of fine-grained permissions (scopes) that can be grouped together for assignment purposes. This is defined in the xs-security.json descriptor, where each role template references one or more scopes.
Why the distractors are wrong:
- A. Role collection - holds several roles, not scopes directly; it sits one level above roles in the hierarchy.
- C. Scope - is the atomic unit of permission itself (e.g.,
app.read); it doesn't hold other scopes. - D. User group - is a grouping of users, not a permission construct; it's not directly part of the XSUAA scope/role model.
Memory tip: Think of the XSUAA hierarchy bottom-up - Scopes feed into Roles, Roles feed into Role Collections, which are assigned to users. The acronym SRC (Scope → Role → Collection) keeps the layering clear: Roles are the middle layer that collects scopes.
Topics
Community Discussion
No community discussion yet for this question.