SAP HANA Developer Guide - Get a Free Blog

Authorization to update or delete native packages, or create sub-packages of packages originating in the
system in which the user is working
SAP HANA Repository Privileges
In addition to the authorizations you can grant users for specific packages (and the design-time objects in those
packages), you can also assign general system privileges to users to enable them to perform basic repository
operations, for example: importing and exporting content, and maintaining delivery units (DU).
If your daily tasks include general administration tasks, you need basic system-level privileges in the repository.
To perform basic administration tasks in the repository, you typically need the following privileges:
● REPO.EXPORT
Enables you to export delivery units; exporting a DU transports it to another system
● REPO.IMPORT
Enables you to import delivery units; importing a DU transports it from another system
● REPO.MAINTAIN_DELIVERY_UNITS
Enables you to maintain your own delivery units (the DU-vendor must equal the system-vendor)
● REPO.WORK_IN_FOREIGN_WORKSPACE
Enables you to move objects from a "foreign" inactive workspace into your own workspace
You can grant or revoke basic, repository privileges to users in the following ways:
● SAP HANA Studio
The System Privileges tab page in the Modeler perspective: Catalog -> Authorization -> Roles or Users
Note: If you want to access the repository from the SAP HANA studio, Eclipse, or other clients,you need
the EXECUTE privilege for SYS.REPOSITORY_REST, the database procedure through which the REST
API is tunneled.
Defining Repository Package Privileges
In the SAP HANA repository, you can set package authorizations for a specific user or for a role. Authorizations
that are assigned to a repository package are implicitly assigned to all sub-packages, too. You can also specify if
the assigned user authorizations can be passed on to other users.
To set user (or role) authorizations for repository packages, perform the following steps:
1. In the SAP HANA studio, open the Navigator view of the Modeler perspective.
2. In the Navigator view, expand the Security Roles/Users node for the system hosting the repository that
contains the packages you want to grant access to.
You can also define roles via source files; roles defined in this way can be assigned to a delivery unit and
transported to other systems.
3. Double click the user (or role) to whom you want to assign authorizations.
4. Open the Package Privileges tab page.
5. Choose [+] to add one or more packages. Press and hold the Ctrl key to select multiple packages.
6. In the Select Repository Package dialog, use all or part of the package name to locate the repository package
that you want to authorize access to.
7. Select one or more repository packages that you want to authorize access to; the selected packages appear
in the Package Privileges tab page.
SAP HANA Developer Guide
Setting Up Roles and Authorizations
P U B L I C
© 2012 SAP AG. All rights reserved. 331