BTP Resource Consumption report view-only role

[dvankempen]

On the BTP Resource Consumption report, any user can load and delete data, tags, and forecast settings. We would like to restrict this via a viewer/admin privilege division. How could this be achieved?

[willempardaens]

Hi Denys,

Restricting access to actions or functions can be done through the authorization concept of CAP (see https://cap.cloud.sap/docs/guides/security/authorization#requires). So you could create a new admin role and, for example, similar to https://github.com/SAP-samples/btp-resource-consumption-monitor/blob/main/cf/srv/manageTagsService.cds#L4, add something before https://github.com/SAP-samples/btp-resource-consumption-monitor/blob/main/cf/srv/manageTagsService.cds#L24 to @requires: ['admin'] for the delete action.