BI 4 on HANA-Part 5: Setting up HANA as a datasource for Design Studio and Analysis Office
Design Studio and Analysis Office use a proprietary access method on HANA based on HTTP. This access method is not enabled by default on the HANA machine.
In this article you can learn the steps required to enable SAP HANA as a datasource with this HTTP connection.
The working environment you have to use is HANA Studio.
Following the steps you can access SAP HANA SPS9 or later with Design Studio 1.5 and Analysis Office 2.1.
Enabling the HANA connectivity on HTTP
The connectivity on HANA is enabled by deploying a specific delivery unit which opens the HTTP port and starts an internal SAP service called INA.
The steps below show how to deploy the delivery, define an appropriate user role for the access and assign privileges to it. Finally you will assign this role to your users.
Let's start with the deployment of the two packages needed to enable the connectivity.
You have to launch the HANA Studio application, select File/Import/Delivery Unit and click on the NEXT button as shown below
In the following page you select the HANA machine onto which you want to enable the service, click NEXT again
You have now to select the packages to import, you need two of them(one is almost always already installed but we will install it again here for sake of completeness).
In the Import page you select Server and the package SAPU5_1.tgz . Make sure that the Overwrite inactive versions and Activate Objects checkbox are enabled.
HANA Studio might take a few minutes to simulate the installation of the package, when you have back the control hit the FINISH button.
You do again the same workflow for the package called HCO_INA_SERVICE.tgz
Click on Finish again.
After installing the two delivery units you should have the following packages available under the HANA Content list: sap/bc/ina and sap/ui5. Check that they are available in your server.
Now you have to set up the appropriate roles to enable your users to correctly access the data.
You can assign the privileges user by user or you can create a new role with the appropriate privileges, then assign this role to users.
For our example you can build a new role.
In HANA Studio go to the Security/Roles list, right click and select New Role.
For this example you create a role called “DEMOROLE”
Once the role has been created you can grant privileges to it.
In the Grant Role tab click the Plus button and assing to this role the predefined role INA_USER as shown in the picture below.
Now go to the Object Privileges tab and add the following privileges:
- Select on _SYS_BIC (or at least on all views you want to provide access to)
- Select on the table BIMC_VARIABLE_MAPPING in _SYS_BI
- Select on the table BIMC_VARIABLE_VIEWS in _SYS_BI
- Select on the table _INA_ACTIVE_OBJECT in _SYS_RT
To add an object privilege just click the PLUS button, then with the help of the search box find the objects listed above and click OK,
Then click the SELECT check box for each object in the DEMOROLE page
When you are finished setting all parameters you click the Deploy button (the green arrow on the top) to validate and put in production the changes.
You now assign this role to each user you want to be enabled to connect to HANA via HTTP from Design Studio and Analysis Office.
To do so, you select the user, go to the Granter Roles page, hit the PLUS button, add the DEMOROLE role you just created and then validate the change.
Finally you need to give to each user the access to the views they have the right to view in Analysis Office or Design Studio.
You provide access by creating an Analytic Privilege and then assigning it to the user (or to the role).
To create the analytic privilege you should
- Open the HANA Studio, log onto your HANA machine with an administrator account
- Right click on any package under the Content list and select New/Analytic Privilege
- You give a name to the Analytic Priviledge (AO_DS_ACCESS in our example) and click Next
- You then add to the privilege all the HANA views that you want to make accessible to your user
- And finally click Finish
The Analytic Privilege editor opens, you have now to activate it by clicking the green arrow at the top right part of the screen
The privilege has been created, now you can associate it to a user or to a role (hence it will be inherited by all users with that role).
In this example we add the privilege to a user.
To do so:
- In HANA Studio, double click on the user in the Users list
- Go to the user Analytic Privileges tab and click the PLUS button
- Select the privilege you just created and click ok
- Now you have to validate the change by hitting the green arrow Deploy button
That’s it. You now have enabled the HANA HTTP connectivity and created a role and a privilege which can be assigned to users who want to connect to the source with Analysis Office and Design Studio.
Users might see all of the views in the HANA system but they will receive an error if they try to connect to a view not listed in ther privilege.
I hope this article was useful!
You can go back to the list of available articles here: SAP BusinessObjects BI 4 on SAP HANA