Best Practice for user management in SAP HANA DB

[Former Member]

Hi Experts,

Keeping in mind about HANA Database security what should be followed to create a user in HANA Studio which will be specially used for creating an application in HANA. Or what best practice should be followed while creating user in SAP HANA Studio.

Thank You,

[Former Member · Accepted solution]

Hi Kavita,

Here are some of the best practices for HANA user administration:

1.First and foremost you should be aware of for what purpose you are creating the user.

2.Separate database user is required for each schema.

   Schema will be automatically created when corresponding user is created

3.Each user should have certain roles and privilages.

  Note that you should not grant any privileges directly to users but to grant them via roles

4.The power user is the SYSTEM user having all roles and privilages and access to full HANA DB which is created at the time of installation

5. Try to know all possible roles and privilages ans their uses

Roles: Basic roles like READ, WRITE, DDL

Privilages: SQL privilage,Analytical Privilage,REPO.READ privilage, Object Prvilage

6. Try to know all possible scenarios where DB users are required

For Hana DB Administration purpose

For Backup purpose

For Replication purpose

For modelling data purpose

For reporting the analyzed data purpose

For Auditing purposes

7. Try to know the AND dependecy and OR dependency at every possible case which plays a crucial role in granting access accordingly for users.

8. Also know that applying restriction is equivalent to granting the access.So know about view restriction,validity restriction and attributr restrictions for best practices.

9. Finally know about the system related schemas which gets created automatically like _SYS_BIC, _SYS_REPO and _SYS_BI where I had seen at times people are confused and struckup in errors.

With Regards,

Hari Kiran P