The CDS employs the concept of Role-Based Access Control (RBAC). Note that roles within the CDS are referred to as security roles. A security role is a collection of privileges and access levels. There are several security roles provided to enable you to get started quickly, for example, the Common Data Service User role shown in the following screenshot:
Figure 8.5 – Common Data Service User security role
There are two types of privilege contained in a security role:
- Record-level: For entities and records
- Task-based: For specific features or operations
The following screenshot shows some of the record-level privileges in a security role:
Figure 8.6 – Record-level privileges
As shown in the previous screenshot, record-level privileges define the operations that a user can perform for each entity, and for the records of that entity:
- Create: Used to create a new record.
- Read: Used to view records.
- Write: Used to edit or update records.
- Delete...