User and Role Management

Based on the architecture and design of the SAP HANA system, the user and role management specifics are defined in accordance. Following are the two distinct architecture and its corresponding user and role management nature,

• While the architecture of SAP HANA is in such as way that it is integrated with any Business Intelligence (BI) platform tools and acts as reporting database, then the end-user and role are managed in the application server.
• When the architecture of SAP HANA is in such a way that it allows the end-user to directly connect with the SAP HANA database, then user and role in the database layer of HANA system are required for both end users and administrators.

SAP HANA Users

In order to use and work with the SAP HANA database system, the user requires essential user privileges from the administrator. Depending on the type of user (technical or non-technical), the access privileges needs to be assigned to that particular user. After successful login to system, user’s authorization to perform the required operation is verified. Executing that operation depends on privileges that user has been granted. These privileges can be granted using roles in HANA Security. HANA Studio is one of the powerful tool to manage user and roles for HANA database system.

Types of Users in SAP HANA

Different types of users are attracted to work with the revolutionary SAP HANA system and in accordance with that, the profile privileges vary as well. User type can be a technical database user or end user needs access on HANA system for reporting purpose or for data manipulation. Following are some of the common types of users who works with the SAP HANA system

Standard Users

Standard users are the type of users who are capable of creating objects in their own Schemas and have read access to system Information models. Generally, read access is provided by PUBLIC role which is assigned to every standard user.

Restricted Users

Restricted users will come under the category of users who can access HANA system with some applications and they do not have SQL privileges on HANA system. When these users are created, they do not have any access initially.

If we compare restricted users with Standard users −

• Restricted users cannot create objects in HANA database or their own Schemas.
• They do not have access to view any data in the database as they don’t have generic Public role added to profile like standard users.
• They can connect to HANA database only using HTTP/HTTPS.