From: https://blogs.sap.com/2014/09/30/assign-hana-privileges-to-user-role/
Several Privilege types are used in SAP HANA
1. System Privilege
System privileges control general system activities, are mainly used to authorize users to perform administrative actions,
Including:
Creating schemas
Managing users
Performing data backups
2. Object Privilege
Object privileges are used to allow access to and modification of database objects, such as tables and views.
3. Package Privilege
Authorizations assigned to a repository package are implicitly assigned to the design-time objects in the package as well as to all sub-packages. Users are only allowed to maintain objects in a repository package if they have the necessary privileges for the package in which they want to perform an operation.
4. Analytic Privilege
Analytic privileges are used to grant different users access to different portions of data in the same view depending on their business role.
5. Application Privilege
In SAP HANA Extended Application Services (SAP HANA XS), application privileges define the authorization level required for access to an SAP HANA XS application.
More:
https://blogs.sap.com/2014/06/08/authorization-of-user-privilege-on-sap-hana-modeler-development/
https://sapstudent.com/hana/privileges-required-for-a-modeler-in-sap-hana
HANA开发工程师权限：
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 |
--Database roles. ---通用权限. GRANT SELECT ON SCHEMA "ZECC" TO _SYS_REPO WITH GRANT OPTION; GRANT SELECT ON SCHEMA "ZECC" TO hana_usr1 WITH GRANT OPTION; ------内部顾问权限--------- ----------System Privilege. --USER hana_usr1 GRANT MODELING TO hana_usr1; GRANT CATALOG_READ TO hana_usr1; GRANT EXPORT TO hana_usr1; GRANT IMPORT TO hana_usr1; GRANT REPO.EXPORT TO hana_usr1; GRANT REPO.IMPORT TO hana_usr1; ----------Object Privileges. GRANT SELECT ON SCHEMA _SYS_BI TO hana_usr1; CALL GRANT_ACTIVATED_ANALYTICAL_PRIVILEGE('_SYS_BI_CP_ALL','hana_usr1') --自建表权限 GRANT SELECT, INSERT, UPDATE, DELETE, EXECUTE, CREATE ANY, ALTER, INDEX, TRIGGER, DROP, SELECT METADATA, SELECT CDS METADATA, REFERENCES, DEBUG, CREATE TEMPORARY TABLE, CREATE VIRTUAL FUNCTION PACKAGE ON SCHEMA "DW2" TO hana_usr1 WITH GRANT OPTION ; --创建虚拟表. GRANT SELECT, DELETE, EXECUTE, CREATE ANY, ALTER, INDEX, TRIGGER, DROP, SELECT METADATA, SELECT CDS METADATA, REFERENCES, DEBUG, CREATE TEMPORARY TABLE, CREATE VIRTUAL FUNCTION PACKAGE ON SCHEMA "ZECC" TO hana_usr1 WITH GRANT OPTION ; ----------Package Privileges. --authorization to expand the "Content" folder to view the package. GRANT EXECUTE ON REPOSITORY_REST TO hana_usr1; --zbi (modity) creating/editing modelers under package. --for user hana_usr1. GRANT REPO.READ ON _SYS_REPO."zbi" TO hana_usr1; GRANT REPO.EDIT_NATIVE_OBJECTS ON _SYS_REPO."zbi" TO hana_usr1; GRANT REPO.ACTIVATE_NATIVE_OBJECTS ON _SYS_REPO."zbi" TO hana_usr1; GRANT REPO.MAINTAIN_NATIVE_PACKAGES ON _SYS_REPO."zbi" TO hana_usr1; --hana live. GRANT REPO.READ ON "sap" TO hana_usr1; --public GRANT REPO.READ ON "public" TO hana_usr1; |