SAP HANA Developer Guide - Get a Free Blog

Action Prerequisite
Revoke analytic privilege from user or role Revoking user must have the object privilege EXECUTE
on the procedure
REVOKE_ACTIVATED_ANALYTICAL_PRIVILEGE
Revoke role created in runtime from user or role Revoking user must be the user who granted the role
Revoke role created in the repository from user or role Revoking user must have the object privilege EXECUTE
on the procedure REVOKE_ACTIVATED_ROLE
Revoke application privilege Revoking user must have the object privilege EXECUTE
Revoke object privilege on activated modeled objects,
such as calculation views from user or role
1. In the Navigator view, choose Security Users .
on the procedure REVOKE_APPLICATION_PRIVILEGE
Revoking user must have the object privilege EXECUTE
on the procedure
REVOKE_PRIVILEGE_ON_ACTIVATED_CONTENT
2. Open the relevant user and grant the required roles and privileges (object privileges, analytic privileges,
system privileges, and package privileges) to the user.
To grant a role or privilege, choose the button and search for the required role or privilege.
To allow the user to pass on his or her privileges to other users, select Grantable to other users and roles.
Note: This option is not available if you are granting a role that was created in the repository.
Note: You cannot grant application privileges directly to users in the SAP HANA studio. It is
recommended that you grant application privileges to roles created in the repository and then grant
the role to the user.
3. Choose the (Deploy) button to save the changes.
Related Links
SAP HANA Administration
12.5 Application Access
When you develop and deploy applications in the context of SAP HANA Extended Application Services (SAP
HANA XS), you must define the application descriptors, which describe the framework in which the application
runs. This application framework includes the root point in the package hierarchy where content is to be served to
client requests, whether or not the application is permitted to expose data to client requests, what kind of access
to the data is allowed, and what if any privileges are required to perform actions on application-related packages
and package content. The application descriptors include the following files:
● Application-descriptor file
346
P U B L I C
© 2012 SAP AG. All rights reserved.
SAP HANA Developer Guide
Setting Up Roles and Authorizations