Role Mapping

All users, passwords, and access control information is managed in the your identity management systems using the administrative tools you normally use for these systems.

For administrative users to have access to the SAP Mobile Platform Server in a production environment, you must map the SAP Mobile Platform default logical roles to the corresponding physical roles or groups in the security repository.

• Default Logical Roles in SAP Mobile Platform
  SAP Mobile Platform roles are logical roles that are built into the system by default.
• Mapping a Logical Role to a Physical Role
  SAP Mobile Platform uses a role-based-access-control (RBAC) security model. SAP Mobile Platform includes predefined logical roles, and uses HttpServletRequest.isUserInRole(logicalRole) for its policy enforcement points in the runtime. Physical roles assigned to a user come from the customer's identity management back-end systems.