Learning: Performing User and Authorization Maintenance

Learning notes from the learning journey: Installing and Administering SAP HANA to take the Certification “SAP Certified Associate – Database Administrator – SAP HANA”.

Authentication and Authorization:

CROSS DATABASE: By default, it is inactive for tenants.

CONNECT TO SAP HANA: JDBC/ODBC (Application Server, Cockpit), HTTP(S) (Web browser, mobile device).

AUTHENTICATION METHODS: User/Password, Kerberos, SAML, SAP ticket, X.509 and JWT.

The authentication methods can be configured in Cockpit or SQL Statements. Whatever authentication method is used, it must be backed by corresponding privileges.

SAP’s provides highly granular access control.

Describing Privileges and Roles:

OBJECT PRIVILEGES: allow access to modification of database objects, such as tables, views, or procedures.

SYSTEM PRIVILEGES: control general system activities, such as creating schemas, creating and changing users, and roles, performing data backups, and managing licenses.

PACKAGE PRIVILEGES: authorize actions on individual packages in the classic repository, such as read access etc.

ANALYTIC PRIVILEGE: read access to data in models such as calculation views depending on certain values or combinations of values.

APP PRIVILEGE: Authorizations for users and clients to access their app.

PRIVILEGES ON USERS: ATTACHED DEBUGGER.