Skip to content

ABAP Keyword Documentation →  ABAP - Dictionary →  ABAP CDS in ABAP Dictionary →  ABAP CDS - Access Control →  ABAP CDS - DCL Statements →  ABAP CDS - DEFINE ROLE →  ABAP CDS - DEFINE ROLE, access_rules 

ABAP CDS - DEFINE ROLE, grant_rule

Other versions: 7.31 | 7.40 | 7.54




Full access rule in the statement DEFINE ROLE in CDS DCL. A full access rule GRANT SELECT ON without the addition WHERE provides access to a CDS entity cds_entity without conditions. If cds_entity is specified, the same applies as for a conditional access rule.

The addition REDEFINITION prevents further REDEFINITION rules from being created for the same CDS entity and making the activation fail.


  • SAP does not as a rule supply any CDS roles with full access rules. Partners and customers can use full access rules to override roles supplied by SAP.

  • The addition REDEFINITION is ignored by the authorization (a full access rule overwrites any COMBINATION MODE AND rules too).


The following CDS role dictates that all users can access the CDS view DEMO_CDS_AUTH_FULLACCESS without access conditions:

@MappingRole: true
define role demo_cds_role_fullaccess {
  grant select on demo_cds_auth_fullaccess; }