Exam C-SEC-2405 Topic 3 Question 78 Discussion

To grant a business user access to data from a Core Data Services (CDS) view in SAP S/4HANA on-premise using the standard ABAP authorization concept and S_RS_AUTH, the correct combination includes a CDS role with access conditions based on S_RS_AUTH, a PFCG role containing the CDS role and access conditions based on S_RS_AUTH, and assignment of the PFCG role to the business user. The CDS role defines data access restrictions at the CDS view level, using S_RS_AUTH to enforce specific conditions, such as filtering data by organizational units. The PFCG role incorporates this CDS role and includes S_RS_AUTH authorizations, ensuring that the user's permissions align with both the CDS view's restrictions and ABAP authorization checks. Assigning only the PFCG role to the user simplifies administration, as the CDS role is embedded within it. Options A and C incorrectly suggest assigning the CDS role directly to the user, which is not standard practice, and option D omits the CDS role's integration into the PFCG role. This combination ensures secure and efficient access to CDS view data.