HCI_USER

SAP CC Users (Technical Settings)

Definition

The HCI_USER table contains information about the authorized users of SAP Convergent Charging

Description

The HCI_USER table contains information about the authorized users of the connected SAP CC system. They can be humans or systems (individual users or service users). The USER_RIGHT table includes the authorization roles assigned to an SAP CC user.

Related Tables

CATALOG_ENTRY
USER_FAILED_AUTHENTICATION
USER_PASSWORD
USER_RIGHT

Technical Data

Schema Version	2025.0.0
Tablespace	CATALOG_DATA
Partitioned	No

Summary

The HCI_USER table is defined by the following columns in your back-end database. See the column details for more information.

Name	PK	IX	Uses	Used by	Definition
OID	PK_HCI_USER			USER_RIGHT (USER_OID) USER_PASSWORD (USER_OID) OBJECT_ACCESS_RULE (USER_OID) USER_FAILED_AUTHENTICATION (USER_OID)	The unique ID of an SAP CC user. It is generated by the SAP CC system.
LOGIN_ID		IX_LOGIN		USER_OPERATION (OPERATOR_NAME)	The SAP user logon
SALT					The salt used to hash the password. If it is null or empty, then no salt is used.
PASSWORD					The hashed password of the SAP CC user. The hashing algorithm used is SHA-256.
ROUNDS					The number of rounds applied to the plain text password to obtain the hashed password. The value 0 means that the former hashing algorithm (one round of SHA-1) is in use for this user.
CLIENT_NUMBER			CLIENT (CLIENT_NUMBER)		The client number associated to the user
CATALOG_NAME			CATALOG_ENTRY (ENTRY_NAME)		The name of the pricing catalog the SAP CC user is associated to More...
LAST_ACTIVITY_DATE					The date of the last activity of the SAP CC user. This field is not used if the user is a service user (another system).
PASSWORD_CHANGE_DATE					The last modification date of the password More...
FAILED_LOGIN_COUNT					The number of times the SAP user entered a wrong password when trying to log on More...
LOCKED					The information if the SAP CC user is locked or not in the system More...
PASSWORD_AUTH					The information if the SAP CC user can use the password-based authentication. More...
SAML_AUTH					The information if the SAP CC user can use the SAML authentication. More...
IS_HUMAN					The information if the SAP CC user is an individual user (human user), or a service user (non-human user) More...
CHANGE_PASSWORD					The information if the SAP CC user must change the password at the next logon
CREATION_DATE					The date of the creation of the SAP CC user.
LAST_MODIFICATION_DATE					The date of the last modification of the SAP CC user.
VALID_FROM					The start date of the SAP CC user validity, inclusive. This field is not used if the user is a service user.
VALID_TO					The end date of the SAP CC user validity, exclusive. This field is not used if the user is a service user.

Column Details

The database schema defines the following columns. Check the definitions, types, available indexes, and formats:

OID

Definition	The unique ID of an SAP CC user. It is generated by the SAP CC system.
Type	DECIMAL(28), NOT NULL
Primary Key	PK_HCI_USER

LOGIN_ID

Definition	The SAP user logon
Type	VARCHAR(64), NOT NULL
Available Index	IX_LOGIN

SALT

Definition	The salt used to hash the password. If it is null or empty, then no salt is used.
Type	VARCHAR(64), NULL

PASSWORD

Definition	The hashed password of the SAP CC user. The hashing algorithm used is SHA-256.
Type	VARCHAR(1000), NULL

ROUNDS

Definition	The number of rounds applied to the plain text password to obtain the hashed password. The value 0 means that the former hashing algorithm (one round of SHA-1) is in use for this user.
Type	DECIMAL(5), NOT NULL
Default	0

CLIENT_NUMBER

Definition	The client number associated to the user
Type	DECIMAL(3), NULL

CATALOG_NAME

Definition	The name of the pricing catalog the SAP CC user is associated to
Description	The field CATALOG_NAME is the identification codename
Format	If this field is not set, the SAP CC user has access to objects from every pricing catalog configured in the SAP CC system. If this field is set with the name of a catalog, the user only has access to the objects contained in this catalog.
Type	VARCHAR(64), NULL

LAST_ACTIVITY_DATE

Definition	The date of the last activity of the SAP CC user. This field is not used if the user is a service user (another system).
Type	TIMESTAMP, NULL

PASSWORD_CHANGE_DATE

Definition	The last modification date of the password
Description	The field PASSWORD_CHANGE_DATE is the last modification date of the password. This field is used only if the advanced password management is enabled.
Format	The `NULL` value can be used to force the expiration of the password. At the creation of a new SAP CC user, the field is set with the NULL value, so that the SAP user must change the password at the first logon.
Type	TIMESTAMP, NULL

FAILED_LOGIN_COUNT

Definition	The number of times the SAP user entered a wrong password when trying to log on
Description	The field FAILED_LOGIN_COUNT is the number of times the user entered a wrong password when trying to log in. If the advanced password management is enabled and if the value of FAILED_LOGIN_COUNT is greater than the maximum number of allowed errors (defined by the parameter PASSWORD_MANAGEMENT_FAIL_LIMIT), the user account is locked. The user cannot do anything until it is unlocked by an administrator.
Format	The initial value of this field is `0`, and it is reset every time the password of the SAP user is modified.
Type	DECIMAL(3), NOT NULL

LOCKED

Definition

The information if the SAP CC user is locked or not in the system

Description

The field LOCKED specifies if the user is locked or not. This field is used only if the advanced password management function is enabled.

Type

DECIMAL(1), NOT NULL

PASSWORD_AUTH

Definition	The information if the SAP CC user can use the password-based authentication.
Description	The field PASSWORD_AUTH specifies if the user can use the password-based authentication.
Type	DECIMAL(1), NOT NULL
Default	1

SAML_AUTH

Definition	The information if the SAP CC user can use the SAML authentication.
Description	The field SAML_AUTH specifies if the user can use the SAML authentication.
Type	DECIMAL(1), NOT NULL
Default	1

IS_HUMAN

Definition

The information if the SAP CC user is an individual user (human user), or a service user (non-human user)

Description

The field IS_HUMAN specifies if the SAP CC user is:

an individual user (human user): the SAP user is an IT consultant, a power user
or a service user (non-human user): the SAP user is another system or application interfaced with SAP Convergent Charging

Service users have fewer constraints relative to their passwords: they cannot be locked due to authentication failures, and their password never expire.

See the SAP CC Security Guide for more information.

Type

DECIMAL(1), NOT NULL

CHANGE_PASSWORD

Definition	The information if the SAP CC user must change the password at the next logon
Type	DECIMAL(1), NOT NULL
Default	0

CREATION_DATE

Definition	The date of the creation of the SAP CC user.
Type	TIMESTAMP, NULL

LAST_MODIFICATION_DATE

Definition	The date of the last modification of the SAP CC user.
Type	TIMESTAMP, NULL

VALID_FROM

Definition	The start date of the SAP CC user validity, inclusive. This field is not used if the user is a service user.
Type	TIMESTAMP, NULL

VALID_TO

Definition	The end date of the SAP CC user validity, exclusive. This field is not used if the user is a service user.
Type	TIMESTAMP, NULL

Primary Key Details

See the primary key information:

PK_HCI_USER

Column(s)	OID
Tablespace	CATALOG_INDX

Index Details

The following database indexes are available in the HCI_USER database table to improve the speed of data retrieval operations during the business processes of SAP Convergent Charging:

IX_LOGIN

Indexed Column(s)	LOGIN_ID
Unique	Yes
Partitioned	No
Tablespace	CATALOG_INDX