## 6.1.1.8.4.5.2  Specify Attributes in a New Role
As an administrator, you can specify attributes in a new role to refine authorizations of business users. Depending on these attributes, business users with this role have restricted access to data.
## Prerequisites
You have maintained the attributes of the users in your identity provider.
##  Note
In SAP Cloud Identity Services or any identity provider, you find the attributes in the configuration.
## Procedure
1. Open the SAP BTP cockpit.
2. Go to your global account (China (Shanghai) region) or subaccount. For more information, see Navigate in the Cockpit [page 2207].
3. Choose your space in Cloud Foundry Spaces or, for subscriptions, see Configure Application Roles and Assign Roles to Users [page 2277].
4. Choose the application.
5. Choose Security Roles .
6. To create a new role, choose Create . A wizard guides you through the role creation process.
7. Enter a name and a description of the new role.
8. Select the role template that you want to use.
9. Choose Next .
10. To specify an attribute, choose the source of the attribute. The following sources are available:
Attribute Sources
| Source            | Value/Attribute                                                                                                                                                                                                                                                                                                                                                                                   |
|-------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Static            | Enter a static value, for example USA to refine the role depending on the country/region.                                                                                                                                                                                                                                                                                                         |
| Identity Provider | Enter an attribute as defined in your identity provider. Check in your identity provider for the exact syntax of the attribute identifier. For SAP Cloud Identity Services, you find the attribute identifier in the settings of the attrib- utes under Applications &Resources Applications <Application Name> Trust Attributes .  Example To use the attribute for cost center, you must enter |
| Unrestricted      | In this case, you want to express that it isn't necessary to set a specific value for this attribute. The behavior is the same as if the attribute wouldn't exist for this role.                                                                                                                                                                                                                  |
11. Choose Next .
12. Select the role collections for your new role. For more information, see the related link.
13. Choose Next and Finish .
You have now created a new role with attributes.
## Related Information
Subscribe to Multitenant Applications Using the Cockpit [page 2274]
Attributes [page 2365] Specify Attributes in a New Role [page 2368]