SAP HANA System Privileges
To be able to access the database, the database user must be assigned sufficient privileges.
Below is an overview of the SAP HANA system privileges needed to use all the features in DBA Cockpit for SAP HANA:
| SAP HANA System Privilege | Description |
|---|---|
|
BACKUP ADMIN |
Schedule actions with DBA Planning Calendar |
|
CATALOG READ |
Display system and monitoring views |
|
INIFILE ADMIN |
Display and change configuration files (.ini files) and statistics server alert thresholds |
|
SERVICE ADMIN |
Display, stop, cancel, and configure services |
|
TRACE ADMIN |
Display, delete and clear traces |
|
DATA ADMIN |
This system privilege allows you to modify and delete every object in every schema. Users with this system privilege cannot select or change data stored in tables, for which they do not have access privileges, but they can delete tables and change table definitions. Caution
The only DBA Cockpit application that requires DATA ADMIN is the REPAIR function in the Consistency Check action in the DBA Planning Calendar. As the assignment of the DATA ADMIN authorization should be restricted as far as possible in accordance with security guidelines, the following recommendation applies: If you want to use the REPAIR function, configure the DBA Cockpit temporarily with the SYSTEM database user. After the REPAIR has been executed, configure DBA Cockpit again with your usual database user. More information: SAP Note 1640741 (FAQ: "DB users for the DBA Cockpit for SAP HANA") in Related Information |
|
GRANT RESOURCE ADMIN |
This system privilege allows you to reset the counters for SQL plan cache. More information: SQL Plan Cache in Related Information |
