## 6.1.1.8.4.5.1  Specify Attributes in a Role
As an administrator of the Cloud Foundry environment, you can specify attributes in roles to refine authorizations of the business users. Depending on these attributes, business users with this role have restricted access to data.
## Prerequisites
You have maintained the attributes of the users in your identity provider.
##  Note
In SAP Cloud Identity Services or any identity provider, you find the attributes in the configuration.
## Procedure
1. Open the SAP BTP cockpit.
2. Go to your subaccount.
For more information, see Navigate in the Cockpit [page 2207].
3. Choose your space in Cloud Foundry Spaces or, in the case of subscriptions, see Configure Application Roles and Assign Roles to Users [page 2277].
4. Choose the application.
5. Choose Security Roles .
6. Select a role.
The role overview pane displays the attribute name and fields where you can select the source and enter a value.
7. Choose Edit .
8. To specify an attribute, choose the source of the attribute. The following sources are available:
<!-- image -->
| Attribute Sources Source   | Value/Attribute                                                                    |
|----------------------------|------------------------------------------------------------------------------------|
| Static                     | Enter a static value, for example USA to refine the role depending on the country. |
|                            |  Remember Follow entries with the Enter key. Otherwise you can't save the role.   |
| Source            | Value/Attribute                                                                                                                                                                                                                                                                                                                                                                                                             |
|-------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Identity Provider | Enter an attribute as defined in your identity provider. Check in your identity provider for the exact syntax of the attribute identifier. For SAP Cloud Identity Services, you find the attribute identifier in the settings of the attrib- utes of your identity provider under Applications &Resources Applications <Application_Name> Trust Attributes .  Example To use the attribute for cost center, you must enter |
| Unrestricted      | In this case, you want to express that it is not necessary to set a specific value for this attribute. The behavior is the same as if the attribute would not exist for this role.                                                                                                                                                                                                                                          |
9. Save your changes.
## Related Information
Subscribe to Multitenant Applications Using the Cockpit [page 2274] Attributes [page 2365]