When a central BTP app manages Cloud Integration across
subaccounts using service keys, every user gets full admin
permissions and the audit trail goes dark. This post shows
how a two-hop IAS token exchange enforces per-user RBAC
and restores named-user attribution. Content, Expert Insights​

Source link