[doc issue] Developer Hub role collections not described clearly

[bauer-at-work]

Issue description

What's the difference between

• "Establish a connection from the API portal to the Developer Hub." in role collection AuthGroup.ContentAuthor and
• "This role is necessary for creating a connection request between the API portal and the Developer Hub." in AuthGroup.APIPortalRegistration?

Feedback Type (Optional)

clarity

Page Title on SAP Help Portal (prefilled)

Role Collections in API Management

Page URL on SAP Help Portal (prefilled)

https://help.sap.com/docs/sap-api-management/sap-api-management/roles-collections-in-api-management-draft?locale=en-US

[SrutiSagaram]

@bauer-at-work Thank you for your feedback. We will check and get back.

[Kakabira]

@bauer-at-work : Thank you for the feedback and for highlighting the ambiguity in the role descriptions. To better distinguish the purpose of these role collections, I’ve updated the information as follows:

AuthGroup.ContentAuthor: Use this role to publish content to Developer Hub.
AuthGroup.APIPortalRegistration: This role is required to create a connection request between multiple API portals and a centralized Developer Hub. It is also used to update the credentials associated with the connection request.

Please see:
Role Collections in API Management: https://help.sap.com/docs/sap-api-management/sap-api-management/roles-collections-in-api-management-draft?version=Cloud

[bauer-at-work]

Hi Kasturi, thanks, but please consider reopening the issue for the following reason:

It appears like ContentAuthor comes with the privilege to view the API credentials for all applications in Developer Hub (scope name: ReadAllAPIKey).
If correct, such a critical privilege needs to be documented.

I checked by assigning ContentAuthor to my user, and I was not able to view API credentials for all applications.
But maybe that's a bug – the scope name ReadAllAPIKey clearly relates to a critical privilege.

Thank you
Michael

[Kakabira]

@bauer-at-work : I had asked the product team to review your use case and verify the exact purpose of the ContentAuthor role collection. They confirmed that this role collection is required to establish the connection between API Portal and Developer Hub.
This is an internal role and is not intended to be assigned to individual users. It is used to handle scenarios involving data inconsistencies between Developer Hub and API Portal. Therefore, the role collection continues to appear in the BTP cockpit and cannot be removed.
Based on the product team’s recommendation, I have removed this role collection from the help documentation.
If you have any further questions regarding this role, the product team will be happy to assist you. Please create a support ticket using the following component: OPU-API-OD-DH.