## 7.2 Default Role Collections of SAP BTP
The following table displays the default role collections available with SAP BTP after initially deploying your accounts.
Default Role Collections Including Roles and Role Templates
| Role Collection                | Role Name                             | Role Template                                    | App ID                            | Role Description                                                                                                                                                                                                     |
|--------------------------------|---------------------------------------|--------------------------------------------------|-----------------------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Global Account Admin- istrator | Global Account Admin                  | GlobalAccount_Admin                              | cis-central! <suffix>             | Role for global account members with read- write authorizations for core commerci- alization operations, such as updating global accounts, set- ting entitlements, and creating, updating, and deleting subaccounts. |
| Global Account Admin- istrator | Global Account Usage Reporting Viewer | GlobalAccount_Us- age_Reporting_Viewer           | uas! <suffix>                     | Role for global account members with read- only authorizations for core commerci- alization operations, such as viewing global account usage infor- mation.                                                          |
| Global Account Admin- istrator | User and Role Admin- istrator         | xsuaa_admin                                      | xsuaa! <suffix>                   | Manage authoriza- tions, trusted identity providers, and users.                                                                                                                                                      |
| Global Account Admin- istrator | System Landscape Ad- ministrator      | GlobalAccount_Sys- tem_Landscape_Ad- ministrator | cmp! <suffix>                     | Administrative access to systems and sce- nario-related resour- ces.                                                                                                                                                 |
| Global Account Viewer          | System Landscape Viewer               | GlobalAccount_Sys- tem_Land- scape_Viewer        | extension-service- cmp! <suffix>  | Viewer access to sys- tems and scenario-re- lated resources.                                                                                                                                                         |
| Subaccount Adminis- trator     | Cloud Connector Ad- ministrator       | Cloud_Connector_Ad- ministrator                  | connectiv- ity! <suffix>          | Operate the data transmission tunnels used by the Cloud con- nector.                                                                                                                                                 |
| Subaccount Adminis- trator     | Destination Adminis- trator           | Destination_Adminis- trator                      | destination-xsapp- name! <suffix> | Manage destination configurations, certifi- cates and subaccount trust via the Destina- tion editor in the SAP BTP cockpit.                                                                                          |
| Role Collection            | Role Name                             | Role Template                          | App ID                            | Role Description                                                                                                                                                                                     |
|----------------------------|---------------------------------------|----------------------------------------|-----------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Subaccount Adminis- trator | Subaccount Admin                      | Subaccount_Admin                       | cis-local! <suffix>               | Role for subaccount members with read- write authorizations for core commerci- alization operations, such as viewing sub- account entitlements, and creating and de- leting environment in- stances. |
| Subaccount Adminis- trator | User and Role Admin- istrator         | xsuaa_admin                            | xsuaa! <suffix>                   | Manage authoriza- tions, trusted identity providers, and users.                                                                                                                                      |
| Subaccount Adminis- trator | Subaccount Service Administrator      | Subaccount_Serv- ice_Administrator     | service-manager! <suffix>         | Administrative access to service brokers and environments on a subaccount level.                                                                                                                     |
| Global Account Viewer      | Global Account Viewer                 | GlobalAccount_Viewer                   | cis-central! <suffix>             | Role for global account members with read- only authorizations for core commercializa- tion operations, such as viewing global ac- counts, subaccounts, entitlements, and re- gions.                 |
| Global Account Viewer      | Global Account Usage Reporting Viewer | GlobalAccount_Us- age_Reporting_Viewer | uas! <suffix>                     | Role for global account members with read- only authorizations for core commerci- alization operations, such as viewing global account usage infor- mation.                                          |
| Global Account Viewer      | User and Role Auditor                 | xsuaa_auditor                          | xsuaa! <suffix>                   | Read-only access for authorizations, trusted identity providers, and users.                                                                                                                          |
| Subaccount Viewer          | Cloud Connector Audi- tor             | Cloud_Connector_Au- ditor              | connectiv- ity! <suffix>          | View the data trans- mission tunnels used by the Cloud con- nector to communi- cate with back-end systems.                                                                                           |
| Subaccount Viewer          | Destination Viewer                    | Destination_Viewer                     | destination-xsapp- name! <suffix> | View destination con- figurations, certificates and subaccount trust via the Destination ed- itor in the SAP BTP cockpit.                                                                            |
| Role Collection                              | Role Name                        | Role Template                      | App ID                            | Role Description                                                                                                                                                                                    |
|----------------------------------------------|----------------------------------|------------------------------------|-----------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Subaccount Viewer                            | Subaccount Viewer                | Subaccount_Viewer                  | cis-local! <suffix>               | Role for subaccount members with read- only authorizations for core commerci- alization operations, such as viewing sub- account entitlements, details of environment instances, and job re- sults. |
| Subaccount Viewer                            | User and Role Auditor            | xsuaa_auditor                      | xsuaa! <suffix>                   | Read-only access for authorizations, trusted identity providers, and users.                                                                                                                         |
| Subaccount Viewer                            | Subaccount Service Auditor       | Subaccount_Serv- ice_Auditor       | service-manager! <suffix>         | Read-only access to service brokers and environments on a subaccount level                                                                                                                          |
| Subaccount Service Administrator             | Subaccount Service Administrator | Subaccount_Serv- ice_Administrator | service-manager! <suffix>         | Administrative access to service brokers and environments on a subaccount level.                                                                                                                    |
| Cloud Connector Ad- ministrator              | Cloud Connector Ad- ministrator  | Cloud_Connector_Ad- ministrator    | connectiv- ity! <suffix>          | Operate the data transmission tunnels used by the Cloud con- nector.                                                                                                                                |
| Destination Adminis- trator                  | Destination Adminis- trator      | Destination_Adminis- trator        | destination-xsapp- name! <suffix> | Manage destination configurations, certifi- cates and subaccount trust via the Destina- tion editor in the SAP BTP cockpit.                                                                         |
| Connectivity and Des- tination Administrator | Cloud Connector Ad- ministrator  | Cloud_Connector_Ad- ministrator    | connectiv- ity! <suffix>          | Operate the data transmission tunnels used by the Cloud con- nector.                                                                                                                                |
| Connectivity and Des- tination Administrator | Destination Adminis- trator      | Destination_Adminis- trator        | destination-xsapp- name! <suffix> | Manage destination configurations, certifi- cates and subaccount trust via the Destina- tion editor in the SAP BTP cockpit.                                                                         |
| Role Collection           | Role Name                          | Role Template                      | App ID                | Role Description                                                                                                                                                                                              |
|---------------------------|------------------------------------|------------------------------------|-----------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Directory Administra- tor | Directory Admin                    | Directory_Admin                    | cis-central! <suffix> | Role for directory members with read- write authorizations for core commerci- alization operations, such as updating di- rectories, setting enti- tlements, and creating, updating, and deleting subaccounts. |
| Directory Administra- tor | User and Role Admin- istrator      | xsuaa_admin                        | xsuaa! <suffix>       | Manage authoriza- tions, trusted identity providers, and users.                                                                                                                                               |
| Directory Administra- tor | Directory Usage Re- porting Viewer | Directory_Usage_Re- porting_Viewer | uas! <suffix>         | Role for directory members with read- only authorizations for core commerci- alization operations, such as viewing di- rectory usage informa- tion.                                                           |
| Directory Viewer          | Directory Viewer                   | Directory_Viewer                   | cis-central! <suffix> | Role for directory members with read- only authorizations for core commerci- alization operations, such as viewing direc- tories, subaccounts, entitlements, and re- gions.                                   |
| Directory Viewer          | User and Role Auditor              | xsuaa_auditor                      | xsuaa! <suffix>       | Read-only access for authorizations, trusted identity providers, and users.                                                                                                                                   |
| Directory Viewer          | Directory Usage Re- porting Viewer | Directory_Usage_Re- porting_Viewer | uas! <suffix>         | Role for directory members with read- only authorizations for core commerci- alization operations, such as viewing di- rectory usage informa- tion.                                                           |
| Role Collection   | Role Name                                            | Role Template                                        | App ID                            | Role Description                                                                                                                                |
|-------------------|------------------------------------------------------|------------------------------------------------------|-----------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------|
| None              | Application Subscrip- tions Viewer                   | Application_Subscrip- tions_Viewer                   | cis-local! <suffix>               | Read-only access to an application's subscrip- tions.                                                                                           |
| None              | Application Destina- tion Administrator              | Application_Destina- tion_Administrator              | destination-xsapp- name! <suffix> | Manage destination configurations, certifi- cates and signing keys for SAML assertions is- sued by the Destina- tion service.                   |
| None              | Application Destina- tion Viewer                     | Application_Destina- tion_Viewer                     | destination-xsapp- name! <suffix> | View destination con- figurations, certificates and signing keys for SAML assertions is- sued by the Destina- tion service.                     |
| None              | Destination Adminis- trator Instance                 | Destination_Adminis- trator_Instance                 | destination-xsapp- name! <suffix> | Manage destination configurations, certifi- cates and signing keys for SAML assertions issued by the Desti- nation service on in- stance level. |
| None              | Destination Certificate Administrator                | Destination_Certifi- cate_Administrator              | destination-xsapp- name! <suffix> | Manage destination certificates.                                                                                                                |
| None              | Destination Certificate Instance Administrator       | Destination_Certifi- cate_Instance_Admin- istrator   | destination-xsapp- name! <suffix> | Manage destination certificates on in- stance level.                                                                                            |
| None              | Destination Certificate Viewer                       | Destination_Certifi- cate_Viewer                     | destination-xsapp- name! <suffix> | View destination certif- icates.                                                                                                                |
| None              | Destination Configura- tion Administrator            | Destination_Configura- tion_Administrator            | destination-xsapp- name! <suffix> | Manage destination configurations.                                                                                                              |
| None              | Destination Configura- tion Instance Adminis- trator | Destination_Configura- tion_Instance_Admin- istrator | destination-xsapp- name! <suffix> | Manage destination configurations on in- stance level.                                                                                          |
| None              | Destination Configura- tion Instance Viewer          | Destination_Configura- tion_Instance_Viewer          | destination-xsapp- name! <suffix> | View destination con- figurations on instance level.                                                                                            |
| None              | Destination Configura- tion Viewer                   | Destination_Configura- tion_Viewer                   | destination-xsapp- name! <suffix> | View destination con- figurations.                                                                                                              |
| Role Collection   | Role Name                                      | Role Template                                  | App ID                            | Role Description                                                                                                                                |
|-------------------|------------------------------------------------|------------------------------------------------|-----------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------|
| None              | Destination Subac- count Trust Adminis- trator | Destination_Subac- count_Trust_Adminis- trator | destination-xsapp- name! <suffix> | Manage destination subaccount trust via the Destination editor in the cloud cockpit.                                                            |
| None              | Destination Subac- count Trust Viewer          | Destination_Subac- count_Trust_Viewer          | destination-xsapp- name! <suffix> | View destination sub- account trust via the Destination editor in the cloud cockpit.                                                            |
| None              | Destination Viewer In- stance                  | Destination_Viewer_In- stance                  | destination-xsapp- name! <suffix> | View destination con- figurations, certificates and signing keys for SAML assertions is- sued by the Desti- nation service on in- stance level. |
| None              | Service Instances Viewer                       | Service_Instan- ces_Viewer                     | service-manager! <suffix>         | Read-only access to Service Manager in- stances, bindings, plans, and offerings.                                                                |
| None              | Subaccount Service Admin                       | Subaccount_Serv- ice_Admin                     | service-manager! <suffix>         | Administrative access to service brokers and environments on a subaccount level.                                                                |
| None              | Subaccount Service Viewer                      | Subaccount_Serv- ice_Viewer                    | service-manager! <suffix>         | Read-only access to service brokers and environments on a subaccount level.                                                                     |