Kyma Security API - Roles

[LuizGomes]

In BTP we can use the xs-secutiry file to define roles for API security. How to do this in kyma?

[jamie_cawley]

You can create an instance of xsuaa to define roles for an application. You can find a simple example which uses the approuter at

https://github.com/SAP-samples/kyma-runtime-extension-samples/tree/main/standalone-approuter

and a cap application at

https://github.com/SAP-samples/kyma-runtime-extension-samples/tree/main/cap-orders-service

Regards,

Jamie

[LuizGomes]

The Roles are available on the BTP portal -> Security , right?
Another doubt, once the service is indicated in the deployment, image below, the service is available to be loaded in the API via loadEnv()

[jamie_cawley]

Yes, whatever roles, role collections, etc, you define for your xsuaa instance will show up in the Security menu. Maybe take a look at

https://cap.cloud.sap/docs/node.js/cds-env

Regards,

Jamie