Technology Blogs by Members
Explore a vibrant mix of technical expertise, industry insights, and tech buzz in member blogs covering SAP products, technology, and events. Get in the mix!
cancel
Showing results for 
Search instead for 
Did you mean: 
NikhilPuri
Explorer

Purpose:


Authorization Management API is used to manage roles and groups and their assignments in applications. With Authorization Management API we can also assign the roles or group to user as per customer requirement.


The Authorization Management API is protected with OAuth 2.0 client credentials. Create an OAuth client and obtain an access token to call the API methods.


 

Follow the below given steps to obtain the access token to call the API methods.


Steps to obtains the access token to call the API methods.

  1. Logon to SAP Cloud Platform Cockpit.

  2. Click on oAuth to create client credentials.

  3. Click on Create API Client.

  4. Select the required permission.

  5. Once, we have our client credentials ready. We must create our destinations

  6. Create one more destination with same URL select Authentication as NoAuthentication.

  7. Now, we are good with our basic configuration. Let’s Implement the ajax calls to obtain the token and maintain roles and groups.


var access_token_url = "/<Destination name with authorization i.e. c4c_oauth> /oauth2/apitoken/v1?grant_type=client_credentials";
//************* AJAX Call Start *************//
$.ajax({
type: "POST",
contentType: "application/json",
url: access_token_url,
success: function(data, textStatus, jqXHR) {
var acc_token = data.access_token;
var header_token = "Bearer" + " " + acc_token;
var get_role_url = /<Second Destination with authorization NoAuthentication > /authorization/v1/accounts/<Subaccount Name> /users/roles/?userId=" +<Pass the userID>;
$.ajax({
type: "GET",
contentType: "application/json",
accept: "application/json",
url: get_role_url,
headers: {
"Authorization": header_token
},
success: function(data, textStatus, jqXHR) {
var data= JSON.stringify(data);
sap.m.MessageToast.show(data);
},
error: function(jqXHR, textStatus, errorThrown) {
// alert("Error " + csrf);
}
});
},
error: function(jqXHR, textStatus, errorThrown) {
alert("Error in Fetching CSRF");}});

 

Conclusion


It’s a simple example of checking the roles and groups assigned to user and their assignments in application. Hope it will help those who are facing this issue & add some knowledge to those who haven’t worked on such applications.

 

Important Links


https://api.hana.ondemand.com/authorization/v1/documentation

 

I hope everyone enjoyed this blog, Please don't forget to put comment and share ?

 

Regards

Nikhil Puri
5 Comments
Labels in this area