User capabilities
User capabilities provide a controlled way to determine which parts of a Micro Frontend (MFE) are available to specific users.
They provide simple, built-in access control within an MFE. Each capability represents a specific function—such as a page, view, or action—and is linked to user groups. Users can access a capability only if their group is assigned to it; otherwise, the MFE blocks the action and may show an access-denied message.
Purpose of User Capabilities
User capabilities provide fine-grained access control within MFEs, while keeping configuration simple and predictable. They serve three main purposes:
• Fine-rained access control
Each capability represents a specific function, action, or UI element inside an MFE. This allows you to control what a user can see or do
• Link between MFE configuration and security
Each capability is linked to exactly one MFE User Definition. The User definition determines how the MFE is configured. The User capabilities determine what parts of that configuration users can access.
• User group–based access management
Capabilities cannot be edited or deleted. The only action available is linking or unlinking a user group, which controls which users can use that capability.
Where User Capabilities Are Managed
Micro frontend definitions
On the Micro frontend definition level, a User capabilities tab is available. This tab displays the list of capabilities defined for the selected MFE. These definitions are read-only: you can view them, but not modify or delete them.
Micro frontend user definitions
To configure access for user groups, go to Micro frontend user definitions level and select an MFE. At the User definition details level, you can then see:
• The MFE name
• The capability key
• The capability description
• A list of user groups linked to the capability
You can add or remove user groups through Link user group to user capabilities in the actions panel. Changes are saved automatically. No other actions are available.
 | • The User capabilities level becomes available only after selecting an MFE in the previous level. • Micro frontend user definitions are property set–dependent, which allows linking to setting-type BOs that are also property set–dependent. |