SAP HANA Developer Guide - Get a Free Blog

12 Setting Up Roles and
Authorizations
12.1 The Authorization Model
Authorization mechanisms ensure that authenticated users can do only those things they are allowed to do. You
can use the authorization mechanisms of the SAP HANA database to specify who is allowed to access which data
and for which activities.
Authorization mechanisms can also be used to help control who is allowed to execute stored procedures and
functions or execute system-level activities, for example: making backups, creating schema, users, roles, and so
on.
Authorizations are specified by granting privileges to principals. Principals are either users or roles. Roles
represent collections of privileges that can be granted to users or other roles, which enables you to create a
hierarchy of roles. Privileges are granted to principals by users.
SAP HANA database authorization mechanisms use the following privileges:
● System privileges
Perform system-level operations or administrative tasks
● Object privileges
Perform specified actions on specified database objects
● Analytic privileges
Allow selective access control for database views generated when modeled are activated
● Package Privileges
Allow operations on packages, for example, creation and maintenance. Privileges can differ for native and
imported packages.
Other types of privileges enable you to provide specific additional authorizations, for example, to users who need
to perform administrative tasks on objects in the repository or to users and clients that need access to
applications:
● Repository Privileges
Enable users to perform basic repository operations, for example: import and export packages, and maintain
delivery units (DU)
● Application Privileges
320
Enable users and clients to access an application, configure what data to expose, and set rules for exposing
URLs.
P U B L I C
© 2012 SAP AG. All rights reserved.
SAP HANA Developer Guide
Setting Up Roles and Authorizations