Phase 14 — Security & Authorization
What this phase solves
Security in SAP Datasphere is not one switch. It is a layered authorization architecture combining tenant-level administration, space-scoped access, object privileges, data access controls, consumption boundaries, identity, auditing, and operational governance.
This phase teaches security as an architecture discipline rather than a list of role names.
Tutorial sequence
| Tutorial | Focus |
|---|---|
| 14.1 | Security foundations and the Datasphere authorization model |
| 14.2 | Users, roles, privileges and least privilege |
| 14.3 | Spaces as security boundaries |
| 14.4 | Data Access Controls and row-level security |
| 14.5 | Sharing, exposure and consumption security |
| 14.6 | Identity, auditing and security operations |
| 14.7 | Enterprise security architecture and design patterns |
| 14.8 | Security troubleshooting, labs and architect exercises |
| 14.9 | Security playbook, interview preparation and production checklist |
Architect progression
Understand → Design → Implement → Test → Audit → Operate → Defend.
By the end, you should be able to explain exactly why a user can see a space, object, or row; where that permission originates; how it is tested; how it is audited; and how the model changes safely as the enterprise grows.
Golden-rule outcome
A production security design must be explainable, least-privileged, testable, auditable, recoverable, and maintainable.
Official documentation anchors
- SAP Datasphere Security Guide
- SAP Datasphere Standard Roles
- SAP Datasphere Privileges by App, Tool, Object, and Task
- SAP Datasphere Working in Spaces
- SAP Datasphere Data Access Controls