Show TOC

Assigning Roles for Accessing SAP HANA DataLocate this document in the navigation structure

Use

For analytical apps, data is retrieved from the SAP HANA database through SAP HANA Extended Application Services (SAP HANA XS). SAP HANA XS provides the data by using OData services that require authorizations, which are defined in SAP HANA as privileges.

The defined privileges in SAP HANA are grouped together in roles and these roles are assigned to SAP HANA database users. The roles and users required in SAP HANA are in addition to the PFCG roles and ABAP users required in the front-end server.

For each app, SAP delivers a role that includes all app-specific privileges.

Prerequisites

  • You have created the required SAP HANA database users.

Procedure

Apps Launched by Using App Launcher Tile

  1. In SAP HANA Studio, go to the SAP HANA Systems view and choose Start of the navigation path Security Next navigation step Users End of the navigation path

  2. Specify the user ID and choose Granted Roles.

  3. Assign the required roles to the user. For more information on the SAP HANA role per app, see the app-specific documentation in the section SAP Fiori Apps.

Apps Launched by Using KPI Tile

  1. In SAP HANA Studio, go to the SAP HANA Systems view and choose Start of the navigation path Security Next navigation step Users End of the navigation path

  2. Specify the user ID and choose Granted Roles.

  3. Assign the required roles to the user:

    1. For read-access to KPI definitions, assign the generic role sap.hba.r.sb.core.roles::SAP_SMART_BUSINESS_RUNTIME.

    2. For each app that the user needs to access, assign the app-specific role that is provided by SAP. For more information on the SAP HANA role per app, see the app-specific documentation in the section SAP Fiori Apps.

    3. For KPI modeling, additionally assign the generic role sap.hba.r.sb.core.roles::SAP_SMART_BUSINESS_MODELER.

Note

If you have deployed SAP HANA in a Suite-on-HANA configuration, you can also assign the roles by using ABAP user management (transaction SU01). For more information, see the SAP Help Portal at http://help.sap.com/nw74Start of the navigation path Application Help Next navigation step Function-Oriented View Next navigation step Security Next navigation step Identity Management Next navigation step User and Role Administration of Application Server ABAP Next navigation step Administration of Users and Roles Next navigation step User Administration with DBMS User Management End of the navigation path.

More Information

For information about users and roles in SAP HANA, see the SAP Help Portal at http://help.sap.com/hana_platformStart of the navigation path System Administration Next navigation step SAP HANA Administration Guide Next navigation step Security Administration Next navigation step Managing SAP HANA Users End of the navigation path.