SAP Cloud ALM: where authorisations across SAP’s cloud portfolio are heading

Why it's worth reading

SAP sets out where authorisations in SAP Cloud ALM are going: first finer-grained role templates and custom role collections, then identity and authorisation managed centrally in SAP Cloud Identity Services, and finally attribute-based access via AMS. The genuinely interesting sentence is tucked away in the middle: SAP cloud services are no longer supposed to run their own user and authorisation management.

It says Cloud ALM, but it means the whole portfolio. Anyone who writes authorisation concepts will want to read it twice.