Grant multiple roles on HANA

[sd6]

Hi experts,

We have an issue with our HANA connector while assigning roles (Provisioning Framework 2). As per my understanding the plugin “4. Assign user membership to SAP HANA roles or privileges” will call the HANA stored procedure GRANT_ACTIVATED_ROLE.

This procedure works only for one role per call. The IdM connector forwards all the roles to be granted separated by a , (comma). The job log throws an exception:

“Exception from Modify operation:com.sap.idm.ic.hana.encoder.HanaEncoderWhitelistException: The provided input is not valid activated role.”
 

The old connector executed just the SQL statement “GRANT role1,role2 TO user”. This won’t work anymore because activated roles can only be granted through the stored procedure.

Does anybody has an idea how to grant multiple roles at once?

Thanks,

Sven

[Former Member]

Hi Sven,

can you pls open a ticket for this issue at SAP.

Best wishes,

Fedya Toslev