For analytical apps, data is retrieved from the SAP HANA database through SAP HANA Extended Application Services (SAP HANA XS). SAP HANA XS provides the data by using OData services that require authorizations, which are defined in SAP HANA as privileges.
The defined privileges in SAP HANA are grouped together in roles and these roles are assigned to SAP HANA database users. The roles and users required in SAP HANA are in addition to the PFCG roles and ABAP users required in the front-end server.
For each app, SAP delivers a role that includes all app-specific privileges.
You have created the required SAP HANA database users.
Apps Launched by Using App Launcher Tile
In SAP HANA Studio, go to the SAP HANA Systems view and choose
Specify the user ID and choose Granted Roles.
Assign the required roles to the user. For more information on the SAP HANA role per app, see the app-specific documentation in the section SAP Fiori Apps.
Apps Launched by Using KPI Tile
In SAP HANA Studio, go to the SAP HANA Systems view and choose
Specify the user ID and choose Granted Roles.
Assign the required roles to the user:
For read-access to KPI definitions, assign the generic role sap.hba.apps.kpi.s.roles::SAP_SMART_BUSINESS_RUNTIME.
For each app that the user needs to access, assign the app-specific role that is provided by SAP. For more information on the SAP HANA role per app, see the app-specific documentation in the section SAP Fiori Apps.
For KPI modeling, assign the generic role sap.hba.apps.kpi.s.roles::SAP_SMART_BUSINESS_MODELER.
Note
If you have deployed SAP HANA in a Suite-on-HANA configuration, you can also assign the roles by using ABAP user management (transaction SU01). For more information, see the SAP Help Portal at
.For information about users and roles in SAP HANA, see the SAP Help Portal at
.