In which order do you define the security-relevant objects in SAP BTP?

Question

Options

• ARole collection
• BRole template
• CRole
• DB-A-C

• A
  6% (3)
• B
  2% (1)
• C
  4% (2)
• D
  87% (41)

Explanation

Option D is correct because in SAP BTP, security objects must be defined from the ground up: first the Role Template (B), which is declared in the application's security descriptor (xs-security.json) by developers; then the Role Collection (A), which an administrator creates as a named container in the BTP Cockpit; and finally the Role (C), which is instantiated from a role template and added into the role collection before the collection is assigned to users or user groups.

Why the other standalone options are wrong: Choosing just A, B, or C alone only names a single object - the question asks for the sequence, so any single-object answer is necessarily incomplete and ignores the dependency chain that ties these three objects together.

Memory tip: Think of the acronym "Blueprint → Bucket → Contents" - the Role Template is the blueprint (B first), the Role Collection is the bucket (A second), and the Role is the actual content that fills it (C last). Or simply remember B-A-C as "Before Admin Collects."

No community discussion yet for this question.