Managing Scopes

You can change services instance authorizations by updating the instance parameters:

From your subaccount, select your SAP Cloud ALM tenant.
Select your service instance from the Service Instance tab.
Update the parameters with the following JSON format, with the list of scopes needed for your service instances:

Sample Code

{
    "xs-security": {
        "xsappname": "<your service instance>",
        "authorities": [
            "$XSMASTERAPPNAME.calm-api.analytics.providers.read",
            "$XSMASTERAPPNAME.calm-api.analytics.read",
            "$XSMASTERAPPNAME.calm-api.bm.read",
            "$XSMASTERAPPNAME.calm-api.bsm.read",
            "$XSMASTERAPPNAME.calm-api.bsm.write",
            "$XSMASTERAPPNAME.calm-api.csa.read",
            "$XSMASTERAPPNAME.calm-api.defects.read",
            "$XSMASTERAPPNAME.calm-api.demo-tasks.read",
		    "$XSMASTERAPPNAME.calm-api.documents.delete",
		 	"$XSMASTERAPPNAME.calm-api.documents.read",
			"$XSMASTERAPPNAME.calm-api.documents.write",
            "$XSMASTERAPPNAME.calm-api.event-situations.write",             
            "$XSMASTERAPPNAME.calm-api.exm.personal.read",
			"$XSMASTERAPPNAME.calm-api.exm.read",
            "$XSMASTERAPPNAME.calm-api.exm.write",
            "$XSMASTERAPPNAME.calm-api.features.personal.read",
			"$XSMASTERAPPNAME.calm-api.features.personal.write",
            "$XSMASTERAPPNAME.calm-api.features.read", 
            "$XSMASTERAPPNAME.calm-api.features.write",  
            "$XSMASTERAPPNAME.calm-api.hm.read",
            "$XSMASTERAPPNAME.calm-api.hm.write",
            "$XSMASTERAPPNAME.calm-api.iep.read",             
            "$XSMASTERAPPNAME.calm-api.integration-monitoring.personal.read",  
            "$XSMASTERAPPNAME.calm-api.integration-monitoring.read",             
			"$XSMASTERAPPNAME.calm-api.integration-monitoring.write",
			"$XSMASTERAPPNAME.calm-api.jobs.read",
			"$XSMASTERAPPNAME.calm-api.jobs.write",
            "$XSMASTERAPPNAME.calm-api.landscape.read",
            "$XSMASTERAPPNAME.calm-api.logs.read",
            "$XSMASTERAPPNAME.calm-api.logs.write",
            "$XSMASTERAPPNAME.calm-api.metrics.read",
            "$XSMASTERAPPNAME.calm-api.metrics.write",
            "$XSMASTERAPPNAME.calm-api.processauthoring.delete",
            "$XSMASTERAPPNAME.calm-api.processauthoring.read",
            "$XSMASTERAPPNAME.calm-api.processauthoring.write",
            "$XSMASTERAPPNAME.calm-api.processmanagement.delete",
            "$XSMASTERAPPNAME.calm-api.processmanagement.read",
            "$XSMASTERAPPNAME.calm-api.processmanagement.write",
            "$XSMASTERAPPNAME.calm-api.projects.read",
            "$XSMASTERAPPNAME.calm-api.projects.write",
            "$XSMASTERAPPNAME.calm-api.requirements.read",
            "$XSMASTERAPPNAME.calm-api.rum.read",
 		 	"$XSMASTERAPPNAME.calm-api.rum.write",
            "$XSMASTERAPPNAME.calm-api.sum.read",
		    "$XSMASTERAPPNAME.calm-api.sum.write",
            "$XSMASTERAPPNAME.calm-api.tasks.read",
            "$XSMASTERAPPNAME.calm-api.tasks.write", 
            "$XSMASTERAPPNAME.calm-api.testcases.delete", 
            "$XSMASTERAPPNAME.calm-api.testcases.force-delete", 
            "$XSMASTERAPPNAME.calm-api.testcases.read", 
            "$XSMASTERAPPNAME.calm-api.testcases.write",
            "$XSMASTERAPPNAME.calm-api.testplans.read", 
            "$XSMASTERAPPNAME.calm-api.testplans.write",   
            "$XSMASTERAPPNAME.calm-api.tests.personal.read", 
            "$XSMASTERAPPNAME.calm-api.tests.read",
            "$XSMASTERAPPNAME.calm-api.traces.read",
            "$XSMASTERAPPNAME.calm-api.traces.write"
        ],
    		"oauth2-configuration": {
      			"credential-types": [
        			"binding-secret"
      			]
    		}
    }
}

Caution

xsappname

When you update the service instance, you cannot change the xsappname, you must re-use the same xsappname you set at service instance creation time. If you didn't set an xsappname at creation time, then you must use the xsappname GUID that was automatically generated.

The xsappname or the xsappname GUID is available from a service instance key, property "xsappname", take everything before the character "!".

Examples:

- "xsappname": "rest-assured-test-api!b38695|sapcloudalm!b16907" → the xsappname is "rest-assured-test-api"
- "xsappname": "4edf3909-e9c4-4a6f-869f-cae14e3d98e1!b38695|sapcloudalm!b16907" → the xsappname is "4edf3909-e9c4-4a6f-869f-cae14e3d98e1" (GUID)