What does SAP recommend you do to secure access management in the SAP Enable Now...

Provide the View Published Content work area permission to the root object of the identity tree.

Provide the Edit Work area permission for all work areas to every master author.

Limit the number of role members for administrators, master authors, and report viewers

Remove the View Published Content standard work area permission for the root object from restricted audience work areas