To give authorization to users, in which order are the artifacts used?
A.
1) The IAM app uses the Authorization Object. 2) The Business Catalog uses the IAM app. 3) The Business Role uses the Business Catalog. 4) The Business User uses the Business Role.
B.
1) The IAM app uses the Business Role. 2) The Business Role uses the Authorization Object. 3) The Authorization Object uses the Business Catalog. 4) The Business User uses the Authorization Object.
C.
1) The IAM app uses the Business User. 2) The Business User uses the Business Catalog. 3) The Business Catalog uses the Business Role. 4) The Business Role uses the Authorization Object.
D.
1) The IAM app uses the Business Catalog. 2) The Business Catalog uses the Business Role. 3) The Business Role uses the Business User. 4) The Business User uses the Authorization Object.
Comprehensive and Detailed Explanation From Exact Extract:
In RAP/ABAP Cloud, authorization objects define authorizations for roles and are invoked from CDS (read) and behavior (modify). This ties app operations to authorization objects and roles administered in IAM.
RAP services are exposed for Fiori apps via service bindings; the resulting Fiori app uses the service and its enforcement (which includes the authorization objects configured for roles). Putting it together for S/4HANA Cloud IAM: Apps carry/trigger checks based on authorization objects; Business Catalogs collect apps; Business Roles collect catalogs; Business Users are assigned roles. This aligns with the ABAP Cloud guidance that authorizations are grouped into roles and checked against authorization objects during access.
===========
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit