xs-security.json

{
  "xsappname": "bookshop-demo",
  "tenant-mode": "dedicated",
  "scopes": [
    {
      "name": "$XSAPPNAME.admin",
      "description": "admin",
      "grant-as-authority-to-apps": [
        "$XSAPPNAME(application, xsappforclientapp)"
      ]
    },
    {
      "name": "$XSAPPNAME.booksadmin",
      "description": "booksadmin"
    },
    {
      "name": "$XSAPPNAME.roleadmin",
      "description": "roleadmin"
    },
    {
      "name": "uaa.user",
      "description": "UAA",
      "grant-as-authority-to-apps": [
        "$XSAPPNAME(application, xsappforclientapp)"
      ]
    },
    {
      "name": "$XSAPPNAME.jobscheduler",
      "description": "Scope for Job Scheduler",
      "grant-as-authority-to-apps": ["jobscheduler"]
    },
    {
      "name": "$XSAPPNAME.job",
      "description": "job",
      "grant-as-authority-to-apps": [
        "$XSAPPNAME(application, bookshop-demo-instance2)"
      ]
    }
  ],
  "attributes": [
    {
      "name": "level",
      "description": "level",
      "valueType": "s",
      "valueRequired": false
    }
  ],
  "role-templates": [
    {
      "name": "admin",
      "description": "generated",
      "scope-references": ["$XSAPPNAME.admin"],
      "attribute-references": []
    },
    {
      "name": "booksadmin",
      "description": "generated",
      "scope-references": ["$XSAPPNAME.booksadmin"],
      "attribute-references": []
    },
    {
      "name": "roleadmin",
      "description": "generated",
      "scope-references": ["$XSAPPNAME.roleadmin"],
      "attribute-references": []
    },
    {
      "name": "Token_Exchange",
      "description": "UAA",
      "scope-references": ["uaa.user"]
    },
    {
      "name": "userattributes",
      "description": "generated",
      "default-role-name": "Attributes of a User",
      "scope-references": [],
      "attribute-references": ["level"]
    }
  ],
  "oauth2-configuration": {
    "credential-types": ["binding-secret", "x509"],
    "redirect-uris": [
      "https://global.consent.azure-apim.net/redirect",
      "https://*.hana.ondemand.com/**",
      "https://hxehost:*/**",
      "http://localhost:*/**"
    ]
  }
}