SAP HANA privileges

2018.07.25 09:32 • 发布 • 阅读 2050

From: https://blogs.sap.com/2014/09/30/assign-hana-privileges-to-user-role/
Several Privilege types are used in SAP HANA
1. System Privilege
System privileges control general system activities, are mainly used to authorize users to perform administrative actions,
Including:
Creating schemas
Managing users
Performing data backups

2. Object Privilege
Object privileges are used to allow access to and modification of database objects, such as tables and views.

3. Package Privilege
Authorizations assigned to a repository package are implicitly assigned to the design-time objects in the package as well as to all sub-packages. Users are only allowed to maintain objects in a repository package if they have the necessary privileges for the package in which they want to perform an operation.

4. Analytic Privilege
Analytic privileges are used to grant different users access to different portions of data in the same view depending on their business role.

5. Application Privilege
In SAP HANA Extended Application Services (SAP HANA XS), application privileges define the authorization level required for access to an SAP HANA XS application.

More:
https://blogs.sap.com/2014/06/08/authorization-of-user-privilege-on-sap-hana-modeler-development/
https://sapstudent.com/hana/privileges-required-for-a-modeler-in-sap-hana

HANA开发工程师权限：

--Database roles.
---通用权限.
GRANT SELECT ON SCHEMA "ZECC" TO _SYS_REPO WITH GRANT OPTION;
GRANT SELECT ON SCHEMA "ZECC" TO hana_usr1 WITH GRANT OPTION;

------内部顾问权限---------
----------System Privilege.
--USER hana_usr1
GRANT MODELING TO hana_usr1;  
GRANT CATALOG_READ TO hana_usr1;  
GRANT EXPORT TO hana_usr1;  
GRANT IMPORT TO hana_usr1;  
GRANT REPO.EXPORT TO hana_usr1;  
GRANT REPO.IMPORT TO hana_usr1;  

----------Object Privileges. 
GRANT SELECT ON SCHEMA _SYS_BI TO hana_usr1;
CALL GRANT_ACTIVATED_ANALYTICAL_PRIVILEGE('_SYS_BI_CP_ALL','hana_usr1')

--自建表权限
GRANT SELECT,
	 INSERT,
	 UPDATE,
	 DELETE,
	 EXECUTE,
	 CREATE ANY,
	 ALTER,
	 INDEX,
	 TRIGGER,
	 DROP,
	 SELECT METADATA,
	 SELECT CDS METADATA,
	 REFERENCES,
	 DEBUG,
	 CREATE TEMPORARY TABLE,
	 CREATE VIRTUAL FUNCTION PACKAGE
	 ON SCHEMA "DW2" TO hana_usr1 WITH GRANT OPTION
;

--创建虚拟表.
GRANT SELECT,
	 DELETE,
	 EXECUTE,
	 CREATE ANY,
	 ALTER,
	 INDEX,
	 TRIGGER,
	 DROP,
	 SELECT METADATA,
	 SELECT CDS METADATA,
	 REFERENCES,
	 DEBUG,
	 CREATE TEMPORARY TABLE,
	 CREATE VIRTUAL FUNCTION PACKAGE
	 ON SCHEMA "ZECC" TO hana_usr1 WITH GRANT OPTION
;

----------Package Privileges.
--authorization to expand the "Content" folder to view the package.
GRANT EXECUTE ON REPOSITORY_REST TO hana_usr1;
--zbi (modity) creating/editing modelers under package.
--for user hana_usr1.
GRANT REPO.READ ON _SYS_REPO."zbi" TO hana_usr1;
GRANT REPO.EDIT_NATIVE_OBJECTS ON _SYS_REPO."zbi" TO hana_usr1;
GRANT REPO.ACTIVATE_NATIVE_OBJECTS ON _SYS_REPO."zbi" TO hana_usr1;
GRANT REPO.MAINTAIN_NATIVE_PACKAGES ON _SYS_REPO."zbi" TO hana_usr1;
--hana live.
GRANT REPO.READ ON "sap" TO hana_usr1;
--public
GRANT REPO.READ ON "public" TO hana_usr1;

--Database roles.

---通用权限.

GRANT SELECT ON SCHEMA "ZECC" TO _SYS_REPO WITH GRANT OPTION;

GRANT SELECT ON SCHEMA "ZECC" TO hana_usr1 WITH GRANT OPTION;

------内部顾问权限---------

----------System Privilege.

--USER hana_usr1

GRANT MODELING TO hana_usr1;

GRANT CATALOG_READ TO hana_usr1;

GRANT EXPORT TO hana_usr1;

GRANT IMPORT TO hana_usr1;

GRANT REPO.EXPORT TO hana_usr1;

GRANT REPO.IMPORT TO hana_usr1;

----------Object Privileges.

GRANT SELECT ON SCHEMA _SYS_BI TO hana_usr1;

CALL GRANT_ACTIVATED_ANALYTICAL_PRIVILEGE('_SYS_BI_CP_ALL','hana_usr1')

--自建表权限

GRANT SELECT,

INSERT,

UPDATE,

DELETE,

EXECUTE,

CREATE ANY,

ALTER,

INDEX,

TRIGGER,

DROP,

SELECT METADATA,

SELECT CDS METADATA,

REFERENCES,

DEBUG,

CREATE TEMPORARY TABLE,

CREATE VIRTUAL FUNCTION PACKAGE

ON SCHEMA "DW2" TO hana_usr1 WITH GRANT OPTION

;

--创建虚拟表.

GRANT SELECT,

DELETE,

EXECUTE,

CREATE ANY,

ALTER,

INDEX,

TRIGGER,

DROP,

SELECT METADATA,

SELECT CDS METADATA,

REFERENCES,

DEBUG,

CREATE TEMPORARY TABLE,

CREATE VIRTUAL FUNCTION PACKAGE

ON SCHEMA "ZECC" TO hana_usr1 WITH GRANT OPTION

;

----------Package Privileges.

--authorization to expand the "Content" folder to view the package.

GRANT EXECUTE ON REPOSITORY_REST TO hana_usr1;

--zbi (modity) creating/editing modelers under package.

--for user hana_usr1.

GRANT REPO.READ ON _SYS_REPO."zbi" TO hana_usr1;

GRANT REPO.EDIT_NATIVE_OBJECTS ON _SYS_REPO."zbi" TO hana_usr1;

GRANT REPO.ACTIVATE_NATIVE_OBJECTS ON _SYS_REPO."zbi" TO hana_usr1;

GRANT REPO.MAINTAIN_NATIVE_PACKAGES ON _SYS_REPO."zbi" TO hana_usr1;

--hana live.

GRANT REPO.READ ON "sap" TO hana_usr1;

--public

GRANT REPO.READ ON "public" TO hana_usr1;

如若转载，请注明出处：https://www.gavindong.com/2647.html

从A库表重复更新B库表的两种思路

上一篇 2018.07.25 09:28

HANA数据库查询重复行

下一篇 2018.07.25 09:44

HANA view（视图）使用计算视图的建议

属性视图和分析视图在绝大多数情况下无法适应数据模型的复杂性，项目中直接使用计算视图！计算式图的数据源可以是属性视图、分析视图、数据库表、数据库视图。使用计算视图创建主数据相关模…

发布 2018.07.25
1.9K 0
发布

SAP HANA死锁检测的思路

关于死锁死锁，英文deadlock，指两个或多个事物在同一资源上相互占用，并请求锁定对方占用的资源，从而大致恶性循环的现象，可查阅文章《什么是数据库死锁》。 HANA数据库如果发…

2021.02.18
163 0
SAP HANA error 10108 and 9300

错误描述：短文本SQL error “SQL code: -10108” occurred while accessing table “TB…

发布 2018.03.02
2.5K 0
发布

HANA 2.0建模后查询视图报SQL JDBC 258错误

HANA创建的分析视图，自己可以保存、验证和激活，然而自己没有权限查看，真实神奇了，为了排查这个错误我连HANA trace都用上了，然而trace里并没有什么详细的实质性的信息。…

2021.04.04
53 0
发布

Hana Smart Data Integration – Installing the DP Agent

The Data Provisioning Agent hosts all SDI Adapters and acts as the communication interface…

2018.03.10
1.9K 0
发布

HANA建模之HANA开发账号权限

假设在HANA的某个数据库中新增了一个A001用户，那么A001用户也就有了一个A001的Schema，我们希望用A001用户登录到HANA使用A001库做HANA建模开发，可以使…

2021.04.10
9 0
Some Q/A about SAP HANA

1. Why is HANA fast as compared to other databases? Ans: HANA is an in-memory database and…

发布 2018.03.01
567 0
dpagent连接HANA多租户模式

Prerequisites The Agent Admin HANA User must have the following roles or privileges. Actio…

发布 2020.05.12
388 0
HANA数据目录迁移小记

迁移情景/usr/sap/只有200GB空间，此前安装时将HED和HEQ的数据目录设置到在该分区上了，现在改分区已经快用满。但/hana/data还有足够的空间，因此考虑将/usr…

发布 2018.06.21
840 0
发布

调用ABAP将数据抽取到HANA的一种方法

通过HANA数据库平台的SDI技术，可以将其他数据库的数据抽取到HANA，也可以通过ABAP将数据抽取到HANA，即不是通过对接数据库而是对接ABAP、这样可以免去一堆数据库运行库…

2021.04.10
12 0
发布

ABAP 7.5巩固之SAP NetWeaver Overview

看了下ABAP 7.5认证内容的SAP NetWeaver Overview章节，还是有新的发现的，简单做下总结。 1.一个SAP实例只能有一个Spool进程，可以有多个Enq进程…

2021.03.27
62 0
SAP HANA SQL Error Codes

The following table lists error codes displayed by SAP HANA database and their description…

发布 2018.03.13
1.3K 0
发布

ABAP通过实现AMDP类利用HANA存储过程取数据

最近abap开发是越来越方便了，尤其是可以使用cds之后，select的速度简直要上天，大量的数据计算过程可以移到数据库层面了。综合对比了abap里写sql、cds和amdp之后，…

2019.07.18
1.3K 0
ABAP CDS join字段type conflict的次优解决办法

在ABAP CDS的join条件中，如果两张表比较的字段类型相同但长度不同，会报type conflict，无法激活，而且join条件中无法使用子查询、left、right等函数对…

发布 2020.10.17
350 0
What does SAP HANA Live mean for reporting and analytics?

SAP HANA Live allows users to easily access real-time data using pre-developed calculation…

发布 2018.03.02
642 0
发布

HANA view关于创建属性视图

属性视图创建好之后，在激活之前需要先勾选主键，否则预览数据时会报错。报错信息如下：解决办法：点击Semantics勾选主键字段，保存激活即可。

2018.07.25
839 0
发布

DBSQL_SQL_DEADLOCK_DETECTED

SM21和ST22报错Runtime error “DBSQL_SQL_DEADLOCK_DETECTED” occurred. 分析某张数据库表发生死锁，…

2021.03.17
102 0
发布

更改SAPABAP1 HANA Schema密码的步骤

This article will show you the steps to take when changing the SAPABAP1 HANA database sche…

2020.10.22
360 0
发布

SAP HANA Database Update/upgrade note

SAP HANA数据库升级记录升级原因 SAP数据库在与第三方系统进行同时大批量数据操作时发生abap程序dump现象，经多番调试人为abap程序并无语法或逻辑错误，因此定性为h…

2018.02.28
1.3K 0
SAP HANA 2 – The Next Generation Platform Optimized for Innovation

Continuing the innovation on providing effective Data Management Solution, SAP is releasin…

发布 2018.03.01
616 0

SAP HANA privileges

相关推荐