define-and-grant-scopes-to-sap-job-scheduling-service-08933d3.md

Define and Grant Scopes to SAP Job Scheduling Service

Create and grant a scope to SAP Job Scheduling service.

Prerequisites

You've created an xsuaa service instance and bound it to the application.

For more information, see Getting Started.

Context

For the service plan standard, SAP Job Scheduling service uses User Account and Authentication (UAA) to facilitate the OAuth 2.0 authorization for job action endpoints. The action endpoint is secured via OAuth 2.0 scopes, hence, the application must grant a scope to the SAP Job Scheduling service.

Note:

The following steps provide an example.

Procedure

1. To grant scopes to SAP Job Scheduling service, open the xs-security.json file that is used for the xsuaa service instance bound to the application and add the following to the scopes section:

   Sample Code:

   Example xs-security.json file, scope section

   "scopes": [{
       "name": "$XSAPPNAME.JOBSCHEDULER",
       "description": "Job Scheduler Scope",
       "grant-as-authority-to-apps": ["$XSSERVICENAME(<jobscheduler instance name>)"]
       }]
   

2. Update the xsuaa service instance with the updated xs-security.json:

   cf update-service <xsuaa-instance-name> -c xs-security.json
   

Related Information

Update a Service Instance ↗️