SAP HANA Developer Guide - Get a Free Blog

12.4 Privileges
SAP HANA offers various privileges that can be assigned to users. Users can be a system, an application, a
service, or a person, and each user is assigned specific roles. Privileges can be assigned to users, roles, or both.
There are several privileges that are required either by the SAP HANA studio or by development tools, such as
SQL. The following types of privileges are explained in the subsequent sections.
● System privileges
● Object privileges
● Package privileges
● Analytic privileges
This section also contains information for creating and granting privileges to users.
12.4.1 System Privileges
System privileges are required to perform system-level operations or administrative tasks.
The following lists shows some of the most common system-level tasks that administrators regularly must
perform:
● Database schema
Creation and deletion of database schema
● Users/Roles
Maintenance and management of users and roles
● Monitor/Trace
Administration of monitoring and tracing
● Backup/Restore
Performance of backup and restore operations
In the SAP HANA database the user SYSTEM has all system privileges. The SYSTEM user can grant system
privileges to other users and roles.
12.4.2 Object Privileges
Object privileges enable users to perform specified actions on specified database objects.
Object privileges are not specific to the SAP HANA database; they are part of the SQL standard. You can use the
SQL statements GRANT and REVOKE to manage privileges.
Note: . If object privileges (or any other privilege type) are granted to roles created in the repository,
granting and revoking actions happen through the execution of stored procedures.
The set of actions that can be allowed by an object privilege depends on the object type. For tables, you can use
actions such as: drop, alter, select, insert and update. An execute action is available for privileges for procedures
and functions. Privileges on a schema level are used to enable actions such as: create objects, perform select,
update, delete or execute operations on all objects contained in the schema.
In the SAP HANA database object privileges are not only available for database catalog objects such as tables,
views and procedures. Object privileges can also be granted for non-catalog objects such as development objects
in the repository of the SAP HANA database.
SAP HANA Developer Guide
Setting Up Roles and Authorizations
P U B L I C
© 2012 SAP AG. All rights reserved. 329