8.1 Explaining Security Flashcards

1
Q

SAC provides basic user mgmt, which lets you do 3 thins with role assignment

A
  • create
  • delete
  • change
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

what user management and authentication mechanism does SAC use

A

SAP Cloud Identity Management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is another way to import user data for security

A

CSV file

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

importing users from an active directory server is supported (TF)

A

false

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

what 3 fields are required for security

A

User ID
Last Name
Email

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

what is the role of a Manager of a user

A

to approve the users requests for self-service role

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

can user ID be changed once it’s created

A

no

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

what is used to link a SAML identity in an external SAML ID provider

A

X509 user mapping

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

what are the pre-delivered standard application roles (12)

A
  • system owner
  • admin
  • modeler
  • planner/reporter
  • viewer
  • BI admin
  • BI content creator
  • BI content viewer
  • SAP BTP Content Creator
  • SAP BTP Content Viewer
  • Boardroom creator
  • Boardroom viewer
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What privileges does a System Owner have

A
  • full privileges

- only 1 user can be assigned this role

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What privileges does a Admin have

A
  • full privileges
  • can access all functions
  • has data read access
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What privileges does a Modeler have

A
  • modeling privileges

- full access to all models and dims

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What privileges does a Planner/Reporter have

A
  • planning and reporting

- data access granted seperately

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What privileges does a Viewer have

A
  • planning read only

- no privileges to change anything

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What privileges does a BI admin have

A
  • full privileges
  • can access all functions
  • has data read access
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What privileges does a BI content creator have

A
  • content creator

- create BI content and models

17
Q

What privileges does a BI content viewer have

A
  • bi read only

no privileges to change anything

18
Q

What privileges does a SAP BTP Content Creator have

A
  • access SAP BTP as a datasource
19
Q

What privileges does a SAP BTP Content Viewer have

A
  • view BTP content
20
Q

What privileges does a Boardroom Creator have

A
  • can create boardrooms
21
Q

What privileges does a Boardroom viewer have

A
  • view all boardrooms
22
Q

Describe the team concept

A
  • a team is a group of users
  • a user can belong to multiple teams
  • a role can be assigned to a team, and all users in the team inherit the role
23
Q

Describe the workflow for assigning privileges to users (4)

A

> create users
create teams
create roles
assign the roles/users to teams

24
Q

how do you indirectly assign a role to a user

A
  1. assign user to team A

2. assign role to team A

25
Q

Single sign on is not supported for

A

live models

26
Q

3 basic ways to create users in the system

A
  • manual
  • file import
  • via SCIM APIs and Dynamic User Creation using SAML IDP
27
Q

Admins can define what 4 types of SAC story access and related elements

A
  • Catalog access (publish stories to catalog by team)
  • Bookmarks (view/edit/full, private vs global)
  • Sharing stories w/ user or team (view/edit/full)
  • Folder access (share folders with view/edit access for stories in the folder)