## 6.1.4.3 Accessing Administration Using APIs of the SAP Authorization and Trust Management Service
The REST services of the SAP Authorization and Trust Management service (XSUAA) provide APIs that enable you to manage entities, such as roles, shadow users, and access tokens in global accounts, directories, and multi-environment subaccounts.
##  Note
To manage Neo subaccounts, use the Neo APIs. For more information, see Using Platform APIs.
## API Overview
The following table provides an overview of the APIs. For more information about the APIs and their API endpoints, see SAP Business Accelerator Hub in the related links.
APIs of SAP Authorization and Trust Management Service
| API                                                                    | Description                                                                                                                                                                                                                                                                                                                                                                                     |
|------------------------------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| User Management (System for Cross-domain Identity Man- agement (SCIM)) | Provides functions to administrate the SAP Authorization and Trust Management service of the Cloud Foundry envi- ronment. Provision users from identity providers and man- age roles and role collections. Use this API to manage shadow users; users the service provisions from your iden- tity provider to the subaccount. See SAP BTP XS Advanced UAA (Cloud Foundry) for more information. |
| Authorization                                                          | Provides functions to administrate the SAP Authorization and Trust Management service of Cloud Foundry environ- ment. Manage service instances of the SAP Authorization and Trust Management service. You can also manage roles, role templates, and role collections of your subaccount.                                                                                                       |
| Identity Provider Management                                           | Provides functions to manage identity providers in in the Cloud Foundry environment.                                                                                                                                                                                                                                                                                                            |
| Security Settings                                                      | Provides functions to manage the security settings of an account in Cloud Foundry environment. Use this API to man- age access token validity and signing keys.                                                                                                                                                                                                                                 |
## Related Information
APIs of SAP Authorization and Trust Management Service service on SAP Business Accelerator Hub Using Platform APIs
Rate Limiting [page 3243]
Limits for Technical Artifacts of the SAP Authorization and Trust Management Service [page 3248]