HCI_USER

SAP CC Users (Technical Settings)

Definition

The HCI_USER table contains information about the authorized users of SAP Convergent Charging

Description

The HCI_USER table contains information about the authorized users of the connected SAP CC system. They can be humans or systems (individual users or service users). The USER_RIGHT table includes the authorization roles assigned to an SAP CC user.

Related Tables

CATALOG_ENTRY
USER_FAILED_AUTHENTICATION
USER_PASSWORD
USER_RIGHT

Technical Data

Schema Version	2025.0.2
Tablespace	CATALOG_DATA
Partitioned	No

Summary

The HCI_USER table is defined by the following columns in your back-end database. See the column details for more information.

Name	PK	IX	Used by	Definition
OID	PK_HCI_USER		USER_RIGHT (USER_OID) USER_RIGHT_ASSIGNMENT (USER_OID) USER_PASSWORD (USER_OID) OBJECT_ACCESS_RULE (USER_OID) USER_FAILED_AUTHENTICATION (USER_OID)	The unique ID of the SAP CC user. It is generated by the SAP CC system.
ID		IX_USER_ID		The SAP CC user ID
LOGIN_ID		IX_LOGIN		The SAP CC user logon
SALT				The salt used to hash the password. If it is null or empty, then no salt is used.
PASSWORD				The hashed password of the SAP CC user. The hashing algorithm used is SHA-256.
ROUNDS				The number of rounds applied to the plain text password to obtain the hashed password. The value 0 means that the former hashing algorithm (one round of SHA-1) is in use for this user.
LAST_ACTIVITY_DATE				The date of the last activity of the SAP CC user. This field is not used if the user is a service user (another system).
PASSWORD_CHANGE_DATE				The last modification date of the password More...
FAILED_LOGIN_COUNT				The number of times the SAP CC user entered a wrong password when trying to log on More...
LOCKED				The information if the SAP CC user is locked or not in the system More...
PASSWORD_AUTH				The information if the SAP CC user can use the password-based authentication. More...
SAML_AUTH				The information if the SAP CC user can use the SAML authentication. More...
OAUTH_TOKEN				The information if the SAP CC user can generate an OAuth (JWT) token via the token endpoint. More...
OAUTH_AUTH				The information if the SAP CC user can be authenticated via an OAuth (JWT) bearer token resolved from the SAP CC Users. More...
IS_HUMAN				The information if the SAP CC user is an individual user (human user), or a service user (non-human user) More...
CHANGE_PASSWORD				The information if the SAP CC user must change the password at the next logon
CREATION_DATE				The date of the creation of the SAP CC user.
LAST_MODIFICATION_DATE				The date of the last modification of the SAP CC user.
VALID_FROM				The start date of the SAP CC user validity, inclusive. This field is not used if the user is a service user.
VALID_TO				The end date of the SAP CC user validity, exclusive. This field is not used if the user is a service user.
DISPLAY_NAME				The name of the SAP CC user, to be displayed in the user interfaces.
GLOBAL_USER_ID				The Global User ID uniquely identifies a user across SAP business applications and services.

Column Details

The database schema defines the following columns. Check the definitions, types, available indexes, and formats:

OID

Definition	The unique ID of the SAP CC user. It is generated by the SAP CC system.
Type	DECIMAL(28), NOT NULL
Primary Key	PK_HCI_USER

ID

Definition	The SAP CC user ID
Type	VARCHAR(64), NOT NULL
Available Index	IX_USER_ID

LOGIN_ID

Definition	The SAP CC user logon
Type	VARCHAR(64), NOT NULL
Available Index	IX_LOGIN

SALT

Definition	The salt used to hash the password. If it is null or empty, then no salt is used.
Type	VARCHAR(64), NULL

PASSWORD

Definition	The hashed password of the SAP CC user. The hashing algorithm used is SHA-256.
Type	VARCHAR(1000), NULL

ROUNDS

Definition	The number of rounds applied to the plain text password to obtain the hashed password. The value 0 means that the former hashing algorithm (one round of SHA-1) is in use for this user.
Type	DECIMAL(5), NOT NULL
Default	0

LAST_ACTIVITY_DATE

Definition	The date of the last activity of the SAP CC user. This field is not used if the user is a service user (another system).
Type	TIMESTAMP, NULL

PASSWORD_CHANGE_DATE

Definition	The last modification date of the password
Description	The field PASSWORD_CHANGE_DATE is the last modification date of the password. This field is used only if the advanced password management is enabled.
Format	The `NULL` value can be used to force the expiration of the password. At the creation of a new SAP CC user, the field is set with the NULL value, so that the user must change the password at the first logon.
Type	TIMESTAMP, NULL

FAILED_LOGIN_COUNT

Definition	The number of times the SAP CC user entered a wrong password when trying to log on
Description	The field FAILED_LOGIN_COUNT is the number of times the user entered a wrong password when trying to log in. If the advanced password management is enabled and if the value of FAILED_LOGIN_COUNT is greater than the maximum number of allowed errors (defined by the parameter PASSWORD_MANAGEMENT_FAIL_LIMIT), the user account is locked. The user cannot do anything until it is unlocked by an administrator.
Format	The initial value of this field is `0`, and it is reset every time the password of the SAP CC user is modified.
Type	DECIMAL(3), NOT NULL

LOCKED

Definition

The information if the SAP CC user is locked or not in the system

Description

The field LOCKED specifies if the user is locked or not. This field is used only if the advanced password management function is enabled.

Type

DECIMAL(1), NOT NULL

PASSWORD_AUTH

Definition	The information if the SAP CC user can use the password-based authentication.
Description	The field PASSWORD_AUTH specifies if the user can use the password-based authentication.
Type	DECIMAL(1), NOT NULL
Default	1

SAML_AUTH

Definition	The information if the SAP CC user can use the SAML authentication.
Description	The field SAML_AUTH specifies if the user can use the SAML authentication.
Type	DECIMAL(1), NOT NULL
Default	1

OAUTH_TOKEN

Definition	The information if the SAP CC user can generate an OAuth (JWT) token via the token endpoint.
Description	The field OAUTH_TOKEN specifies if the user is allowed to request an OAuth (JWT) token from the token generation endpoint. It does not control whether an incoming JWT can authenticate the user on WS/REST channels (see OAUTH_AUTH for that).
Type	DECIMAL(1), NOT NULL
Default	0

OAUTH_AUTH

Definition	The information if the SAP CC user can be authenticated via an OAuth (JWT) bearer token resolved from the SAP CC Users.
Description	The field OAUTH_AUTH specifies if the user is allowed to be authenticated on the WS/REST channels by a JWT bearer token that carries no `sap_cc_user_profiles` claim, in which case the user is resolved by the JWT `sub` claim from the SAP CC Users. Only single-assignment technical unlocked users flagged with OAUTH_AUTH are accepted through this path.
Type	DECIMAL(1), NOT NULL
Default	0

IS_HUMAN

Definition

The information if the SAP CC user is an individual user (human user), or a service user (non-human user)

Description

The field IS_HUMAN specifies if the SAP CC user is:

an individual user (human user): the SAP CC user is an IT consultant, a power user
or a service user (non-human user): the SAP CC user is another system or application interfaced with SAP Convergent Charging

Service users have fewer constraints relative to their passwords: they cannot be locked due to authentication failures, and their password never expire.

See the SAP CC Security Guide for more information.

Type

DECIMAL(1), NOT NULL

CHANGE_PASSWORD

Definition	The information if the SAP CC user must change the password at the next logon
Type	DECIMAL(1), NOT NULL
Default	0

CREATION_DATE

Definition	The date of the creation of the SAP CC user.
Type	TIMESTAMP, NULL

LAST_MODIFICATION_DATE

Definition	The date of the last modification of the SAP CC user.
Type	TIMESTAMP, NULL

VALID_FROM

Definition	The start date of the SAP CC user validity, inclusive. This field is not used if the user is a service user.
Type	TIMESTAMP, NULL

VALID_TO

Definition	The end date of the SAP CC user validity, exclusive. This field is not used if the user is a service user.
Type	TIMESTAMP, NULL

DISPLAY_NAME

Definition	The name of the SAP CC user, to be displayed in the user interfaces.
Type	VARCHAR(256), NULL

GLOBAL_USER_ID

Definition	The Global User ID uniquely identifies a user across SAP business applications and services.
Type	VARCHAR(40), NULL

Primary Key Details

See the primary key information:

PK_HCI_USER

Column(s)	OID
Tablespace	CATALOG_INDX

Index Details

The following database indexes are available in the HCI_USER database table to improve the speed of data retrieval operations during the business processes of SAP Convergent Charging:

IX_LOGIN

Indexed Column(s)	LOGIN_ID
Unique	Yes
Partitioned	No
Tablespace	CATALOG_INDX

IX_USER_ID

Indexed Column(s)	ID
Unique	Yes
Partitioned	No
Tablespace	CATALOG_INDX