compatible-changes-in-the-security-descriptor-file-c3b892e.md

Compatible Changes in the Security Descriptor File

If you update a service instance, you can add, change, and/or delete scopes, attributes, and role templates. Whenever you change role templates, you adapt roles that are derived from the changed role template.

Compatible Changes in xs-security.json

Security Artifacts in the xs-security.json File	Action
Scope	Add Delete Change description granted-apps
Attribute	Add Delete Change description Note: Do not change the valueType of the attribute.
Role template	Add Delete Change description scope-references attribute-references (can be deleted only) Restriction: When you define or update role templates and attributes, observe the following configuration restrictions in Relationship Between default-values of attribute-references and valueRequired.