Understanding Security Groups
- What a security group is
- Where to find the Security Groups page
- What types of security groups there are
- Who can create and edit security groups
- What you can use security groups for
Dragomir AnachkovDecember 16, 2025Prerequisites
Note: This tutorial is part of a learning journey.
- Make sure you’ve fulfilled all prerequisites in Getting Started with Cloud Foundry Environment and SAP BTP Cockpit.
- You have one of the following roles in the space where the application is deployed: Org Manager, Space Manager, Space Developer, Space Auditor, Space Supporter.
- Step 1
In the Cloud Foundry environment, a security group is a set of rules that control network traffic for applications. These rules specify which protocols, ports, and IP address ranges are allowed for outgoing connections from your apps. If your application tries to access an endpoint that isn’t allowed by its assigned security group, the request will be blocked.
Note: SAP can add traffic restrictions that aren’t visible through the security groups. For example, these restrictions can include limitations for embargoed countries.
To view the security groups in SAP BTP cockpit:
-
Go to Cloud Foundry > Spaces in the left navigation menu.
-
Go to a space.
-
Go to Security Groups in the left navigation menu.
Security groups are created and managed by platform administrators. Standard roles, such as Org Manager, Space Manager, and Space Developer, don’t have permissions to create or modify security groups. Some services automatically provide security groups when they are enabled.
-