User to device mapping in IoT services

Hello,

I will appreciate some guidance on good practices to link users to devices when using IoT services.

My scenario is as follows:

- multiple devices send data to IoT services on HCP

- XSJS service consumes the data and passes it to a custom web application

- At the moment I am accessing HANA DB using a generic user and filter data by device only. Web application has no authentication.

- Future users of the web application are not the users of SAP Cloud Platform!!!

I want to add user authentication to my app but I still can't see any way to link the users with devices they can manage. This scenario is well supported by other IoT platforms so I believe it is not uncommon to have users responsible for only certain IoT devices and not all. Would using Cloud Identity help in some way and CI user information would be shared with XSJS app?

Ideally I would like to avoid creating separate users in HANA database and assigning device specific privileges.

I will appreciate any suggestions.

Regards,

Mark