Visual Composer uses the user management and authentication mechanisms provided with the SAP NetWeaver platform, in particular the SAP NetWeaver Application Server Java (AS Java). Therefore, the security recommendations and guidelines for user administration and authentication as described in the SAP NetWeaver Application Server Java Security Guide also apply to Visual Composer. For more information, see SAP NetWeaver Application Server Java Security Guide.

Visual Composer allows access to two AS Java roles: Administrator and VisualComposerUser. These roles have all the necessary permissions to allow a user to perform modeling tasks while working with Visual Composer Storyboard, such as create, develop, manage and deploy.

It is the administrator's responsibility to manage user accounts for the designers who create models with Visual Composer, and to assign them the VisualComposerUser role. All user administration and authentication is carried out through AS Java UME service. For more information, see the User Administration and Standard Users section of the SAP NetWeaver Application Server Java Security Guide.

To provide access to back-end systems, each Visual Composer user should be assigned (at least) read permissions to the relevant system(s), to access the needed data services.