SAP HANA Developer Guide - Get a Free Blog

12.4.6 Granting Privileges to Users
Privileges can be granted to database users either directly, or indirectly through roles that they have been
granted. In this case, the privileges are inherited. Roles are the standard mechanism of granting privileges to
users.
To be able to grant and revoke privileges and roles to and from users and roles, the following prerequisites must
be met:
Action Prerequisite
Grant system privilege, object privilege, or package
privilege to user or role
Granting user must have the privilege being granted
and be authorized to grant it to other users and roles
Grant analytic privilege to user or role Granting user must have the object privilege EXECUTE
Grant object privilege on activated modeled objects,
such as calculation views, to user or role
on the procedure
GRANT_ACTIVATED_ANALYTICAL_PRIVILEGE
Granting user must have the object privilege EXECUTE
on the procedure
GRANT_PRIVILEGE_ON_ACTIVATED_CONTENT
Grant role created in runtime to user or role ● Granting user must have the role being granted
and be authorized to grant it to other users and
roles, or
● Granting user must be have the system privilege
ROLE ADMIN
Grant role created in the repository to user or role Granting user must have the object privilege EXECUTE
on the procedure GRANT_ACTIVATED_ROLE
Grant application privilege Granting user must have the object privilege EXECUTE
Grant object privilege on schema containing activated
modeled objects, such as calculation views, to user or
role
Revoke system privilege, object privilege, or package
privilege from user or role
Revoke object privilege on schema activated
containing modeled objects, such as calculation views,
from user or role
SAP HANA Developer Guide
Setting Up Roles and Authorizations
on the procedure GRANT_APPLICATION_PRIVILEGE
Granting user must have the object privilege EXECUTE
on the procedure
GRANT_SCHEMA_PRIVILEGE_ON_ACTIVATED_CONT
ENT
Revoking user must be the user who granted the
privilege
Revoking user must have the object privilege EXECUTE
on the procedure
REVOKE_SCHEMA_PRIVILEGE_ON_ACTIVATED_CON
TENT
P U B L I C
© 2012 SAP AG. All rights reserved. 345