To grant authorizations to people from the default identity provider in your subaccount, ensure that they have a user account.
If the person in question already has a user account on sap.com Web sites, then that person already has a user in the default identity provider. Add this user to your accounts, if you know this person's e-mail address.
Consider using a custom identity provider to integrate your own identity and access management solution.
For technical users, create the user in your custom identity provider. In your custom identity provider, you control the access policies of these users independently from the policies we set for the default identity provider. Our default identity provider is meant for human users, who interact with SAP and our solutions.
Send your colleagues the self-registration URL.
https://account.sap.com/core/create/register?redirectURL=https%3A%2F%2Femea.cockpit.btp.cloud.sap%2Fcockpit%2F
The Web site registers you with SAP Universal ID, which also registers you with the SAP ID service. If you already have a user in the SAP ID service, associate this user with your new SAP Universal ID account. SAP Universal ID manages the users of official SAP sites, including the SAP developer and partner community.
After your colleagues sign up, add them to a subaccount. Assign role collections to them. Then your colleagues can log on to the SAP BTP cockpit.
Related Information
Add Users from SAP ID Service for Multi-Environment Subaccounts