Managing Space Members

Space member is a user who is granted space-scoped roles and permissions. The purpose of space roles is to maintain security and support collaboration.

There are currently four space roles that you can assign to users. These roles determine which features users can view and access, and which actions they can peform in the corresponding space.

Here’s the list of all space roles and their permissions in the SAP BTP cockpit:

In this tutorial, there is a software developer named John Doe. He has the task to deploy applications in your space, and he needs the Space Developer role to do that.

1. Go to Cloud Foundry > Spaces in the left navigation menu.

   

2. Go to the space where you want to make John a Space Developer.

   Note: If you don’t have any space roles assigned, you have read-only access to the space. For example, you can’t deploy applications without the Space Developer role, which is why you don’t see the Deploy Application button:

   

3. Go to Space Members in the left navigation menu.

   

4. Choose Add Members.

   

5. Enter John’s e-mail adddress.

   

   Note: You can add multiple space members at the same time by listing their e-mail addresses with a comma.

6. Select the space role you want to assign. In this case, select the Space Developer role.

7. Choose Add.

John now has the Space Developer role.

Note: When you have the Org Manager role and you add new space members in an org they aren’t part of yet, they automatically receive the Org User role. This is in addition to the space roles you’ve assigned.

You can change the space roles of users to reflect a shift in their responsibilities. You can also remove space roles when users no longer need to perform the corresponding actions.

1. Choose the Edit button in the Actions column.

   

2. Update the space roles.

   In this case, let’s assume John’s expertise makes him the right person to manage this space and give him the Space Manager role.

   

3. Choose Save.

Note: This example shows you how to delete a space member for demonstration purposes. Make sure you have a space member because you need it in the next tutorials.

You can remove access to the space of a user who is no longer part of your development team.

1. Choose the Delete button in the Actions column.

   

2. Choose Delete to confirm the action.

   

Note: This action removes the member from the current space while retaining their org roles and space roles in other spaces.

You can learn what a custom identity provider is in our previous tutorial Managing Org Members.

If you’ve established trust with a custom identity provider, the Add Space Members dialog gives you the additional option to select an identity provider from a dropdown menu:

For more information, see Establish Trust and Federation of Custom Identity Providers for Platform Users | SAP Help Portal.

Note: When you edit or delete space members, the change applies only to the space member stored in the corresponding identity provider.

For example, suppose you have two space members with the e-mail address john.doe@example.com. One space member uses the default sap.ids identity provider, and the other uses your custom identity provider - ae4w2ks65-platform. If you edit the roles of the space member with sap.ids, only that space member’s permissions change.

Assign only the required roles

Give each user only the permissions they need to perform their tasks. This ensures better security and transparency within the space.

Example: Assign the Space Developer thoughtfully. Give it only to software developers who will actively deploy or manage applications in your space.

Clean up access regularly

Maintain a clean space by removing users who are no longer part of the team or project. This prevents unnecessary access to resources, and ensures that roles and permissions reflect the current state of your team.