nerdexam
SAP

C_SEC_2405 · Question #31

In S/4HANA on-premise, which of the following combinations is required to grant a business user access to data from a Core Data Services (CDS) view using the standard ABAP authorization concept and…

The correct answer is B. - A CDS role with access conditions based on authorization object S_RS_AUTH. The answer choices in your question appear to have a formatting issue - all four options (A through D) display the same text. I can't accurately explain why the distractors are wrong without seeing their actual distinct content. That said, here's what I can tell you about the…

Identity and Access Management

Question

In S/4HANA on-premise, which of the following combinations is required to grant a business user access to data from a Core Data Services (CDS) view using the standard ABAP authorization concept and authorization object S_RS_AUTH?

Options

  • A
    • A CDS role with access conditions based on authorization object S_RS_AUTH
  • B
    • A CDS role with access conditions based on authorization object S_RS_AUTH
  • C
    • A CDS role with access conditions based on authorization object S_RS_AUTH
  • D
    • A CDS role with access conditions based on authorization object S_RS_AUTH

How the community answered

(38 responses)
  • A
    3% (1)
  • B
    82% (31)
  • C
    11% (4)
  • D
    5% (2)

Explanation

The answer choices in your question appear to have a formatting issue - all four options (A through D) display the same text. I can't accurately explain why the distractors are wrong without seeing their actual distinct content.

That said, here's what I can tell you about the concept being tested:


The Core Concept: CDS Authorization with S_RS_AUTH

In S/4HANA on-premise, granting access to a CDS view via the standard ABAP authorization concept requires two layers working together:

  1. A CDS role (DCL source) - defined using Data Control Language (DCL), this attaches access conditions to the CDS view itself, referencing the authorization object S_RS_AUTH.
  2. An ABAP role containing S_RS_AUTH - this holds the actual field values (e.g., BIREPUID) that control what data the user can see.
  3. The ABAP role assigned to the user - connecting the user to the authorization values.

The CDS role alone doesn't grant access - it only enforces how access is checked. The ABAP role is what carries the values that determine what passes the check.


Memory tip: Think of it as a lock (CDS role/DCL) and a key (ABAP role with S_RS_AUTH values). The user needs both - the lock defines the rule, the key provides the credential. Neither works without the other.


Could you paste the actual distinct text for choices A, B, C, and D? I can then give you a precise explanation of the distractors.

Topics

#CDS views#S_RS_AUTH#ABAP authorization#access conditions

Community Discussion

No community discussion yet for this question.

Full C_SEC_2405 Practice