5/16/2021

SAP HANA Administration Guide for SAP

HANA Service
Generated on: 2021-05-16 19:13:01 GMT+0000

SAP HANA Service for SAP BTP in AWS and GCP Regions | Cloud

PUBLIC

Original content: https://help.sap.com/viewer/6a504812672d48ba865f4f4b268a881e/Cloud/en-US

Warning

This document has been generated from the SAP Help Portal and is an incomplete version of the official SAP product
documentation. The information included in custom documentation may not re ect the arrangement of topics in the SAP Help
Portal, and may be missing important aspects and/or correlations to other topics. For this reason, it is not for productive use.

For more information, please visit the https://help.sap.com/viewer/disclaimer.

This is custom documentation. For more information, please visit the SAP Help Portal 1
 5/16/2021

SAP HANA Administration Guide

This guide describes how to monitor, con gure, and optimize the SAP HANA database consumed through the SAP HANA service
for SAP BTP in the Cloud Foundry environment using SAP HANA tools.

About the SAP HANA Service

The SAP HANA service allows you to consume the SAP HANA database from cloud applications running on SAP Business
Technology Platform, as well as from applications running elsewhere using the standard SAP HANA clients. Every instance of the
SAP HANA service has its own single SAP HANA database.

Administering the SAP HANA Database in the Cloud

In general, as a managed database service, databases consumed through the SAP HANA service require little administration:
service availability is guaranteed and backups are fully automated. You can create and manage your instances quickly and easily
in the SAP BTP cockpit where you can also perform routine administration tasks such as the following:

Monitor database performance and resource usage

Optimize and tune performance

Balance workload

Manage the catalog

Con gure system properties

Con gure security settings

Create and manage database users

Set up and manage the SAP HANA deployment infrastructure (HDI)

For these administration activities the SAP HANA cockpit and the integrated SAP HANA database explorer are available as a
service in the SAP BTP. It is also possible to use the command-line utility hdbsql, which is available with the SAP HANA client.

For some administration activities a service request is required, for example, to recover a database, or to reset the SYSTEM
user password. For more information, see the SAP HANA service for SAP BTP Getting Started Guide and the SAP BTP
documentation.

Related Information
SAP HANA Service for SAP BTP Getting Started Guide
SAP Business Technology Platform
Backup and Recovery in the SAP HANA Service

SAP HANA Database as a Service

The SAP HANA service is a managed database service that allows you to leverage the in-memory data processing and advanced
analytic capabilities of SAP HANA in the cloud.

Using the SAP HANA service, developers, data scientists, and data analysts can build next-generation, data-driven applications
running hybrid transaction and analytic processing workloads – for example enterprise application extensions, agile data marts,
and new geospatial, Internet of Things-enabled or machine-learning applications that exploit the core online transaction and
analytical in-memory processing capabilities of SAP HANA.

It is also possible to combine the advanced data-processing technology of the SAP HANA service with business-ready cloud
services from SAP Business Technology Platform to extend, integrate, and build real-time, intelligent business processes.

This is custom documentation. For more information, please visit the SAP Help Portal 2
 5/16/2021
For more information about developing applications in SAP BTP, see the SAP BTP documentation at
https://help.sap.com/viewer/p/CP.

Supported Applications and Connectivity

The SAP HANA service supports applications designed for the SAP BTP, Cloud Foundry environment – for example, applications
developed using SAP HANA extended application services, advanced model and deployed to the Cloud Foundry environment.

You can also use JDBC, ODBC, Microsoft ADO.NET, Python, and Node.js to connect applications to SAP HANA service instances
using the standard SAP HANA clients, for example, applications running in your Amazon Web Services account.

SAP HANA service instances are exposed via secure endpoints to the public internet and support connections over https or
WebSockets.

System Architecture
Every instance of the SAP HANA service created in SAP BTP is equivalent to a single SAP HANA tenant database in an SAP
HANA system. When you create an instance, an SAP HANA system with one tenant database is provisioned. The tenant
database is the sole tenant in the system. For multiple databases, you must therefore create multiple service instances. For
more information about creating SAP HANA service instances, see the SAP HANA Service for SAP BTP Getting Started Guide .

The SAP HANA system provisioned with every SAP HANA service instance also always has exactly one system database. The
system database is needed for system administration tasks. You do not have access to the system database. An SAP HANA
service instance provides access only to the tenant database.

Related Information
Connections to the SAP HANA Service
Creating an SAP HANA Service Instance

Server Components of the SAP HANA Database

Overview of the most important server components of the SAP HANA database and the corresponding OS processes and
services

Core Servers

Server Component OS Process Service Name Description

Name server hdbnameserver nameserver The name server, which runs in the system database
only, owns the information about the topology of the
SAP HANA system, including knowledge of the tenant
databases that exist in the system. Information
about the location of tables and table partitions is
stored in the relevant tenant database catalog.

Index server hdbindexserver indexserver The index server, which runs in every tenant
database (but not the system database), contains
the actual data stores and the engines for processing
the data.

This is custom documentation. For more information, please visit the SAP Help Portal 3
 5/16/2021

Server Component OS Process Service Name Description

Compile server hdbcompileserver compileserver The compile server performs the compilation of
stored procedures and programs, for example,
SQLScript procedures. It runs on every host and does
not persist data. It runs in the system database and
serves all tenant databases.

Preprocessor server hdbpreprocessor preprocessor The preprocessor server is used by the index server
to analyze text data and extract the information on
which the text search capabilities are based. It runs
in the system database and serves all tenant
databases.

SAP HANA Deployment hdbdiserver diserver HDI handles the deployment of design-time artifacts
Infrastructure (HDI) into the SAP HANA database.
server

Optional Servers
In addition to the core servers mentioned above, the following optional servers may also be running.

 Note
For more information about enabling additional capabilities in your SAP HANA service instance, see the SAP HANA Service
for SAP BTP Getting Started Guide .

Server Component OS Process Service Name Description

Script server hdbscriptserver scriptserver The script server is used to execute application
function libraries written in C++.

Document store server hdbdocstore docstore This server is required for the document store
repository. The document store allows native
operations on JSON documents and joins with other
column or row store tables.

Data provisioning server hdbdpserver dpserver The data provisioning server is part of SAP HANA
smart data integration. It provides capabilities such
as data provisioning in real time and batch mode,
real-time data transformations, data quality
functions, adapters for various types of remote
sources, and an adapter SDK for developing
additional adapters.

For more information, see the documentation for SAP

HANA smart data integration on SAP HANA Portal.

Related Information
SAP HANA Service for SAP BTP Getting Started Guide
Ports and Connections
The JSON Document Store
Add or Remove Services in a Tenant Database
SAP HANA Deployment Infrastructure
SAP HANA XS Advanced Migration Guide
https://help.sap.com/viewer/p/HANA_SMART_DATA_INTEGRATION

This is custom documentation. For more information, please visit the SAP Help Portal 4
 5/16/2021

System Limitations

Limitations to take into consideration when administering an SAP HANA database.

Aside from the table below, most system limits can also be viewed by querying the M_SYSTEM_LIMITS system view (SELECT *
FROM M_SYSTEM_LIMITS;). However, your values might differ depending on the hardware and software con guration your
system uses.

For details of sizing and limitations regarding HDI containers, refer to the topic SAP HDI Sizing and Limitations in the guide SAP
HANA Deployment Infrastructure (HDI) Reference for SAP HANA Platform (see Related Information below).

Limitation Area Limit M_SYSTEM_LIMITS view name for the limitation

Database size limit Row Store: 1,945 GB MAXIMUM_SIZE_OF_ROW_STORE

Column Store:
Dependent on size
of physical memory

Number of locks Unlimited for record MAXIMUM_NUMBER_OF_TABLE_LOCKS

locks,

16,383 for table

locks

Number of sessions 65,536 MAXIMUM_NUMBER_OF_SESSIONS

Schema Limitations

Number of schemas per SAP Maximum value of

HANA instance BIGINT data type

Identi er length 127 characters MAXIMUM_LENGTH_OF_IDENTIFIER

Length of an alias name 128 characters MAXIMUM_LENGTH_OF_ALIAS_NAME

Table name length Same as Identi er MAXIMUM_LENGTH_OF_IDENTIFIER

length

Column name length Same as Identi er MAXIMUM_LENGTH_OF_IDENTIFIER

length

Length of a string literal 8 MB MAXIMUM_LENGTH_OF_STRING_LITERAL

Number of hex characters in a 8,192 Bytes MAXIMUM_LENGTH_OF_BINARY_LITERAL

binary literal

Tables and View Limitations

Number of columns in a table 64,000 MAXIMUM_NUMBER_OF_COLUMNS_IN_TABLE

This limit can vary

based on context,
for example, in the
context of virtual
tables, SAP HANA
may be limited by
the capabilities of
the remote system
and the limit of the

This is custom documentation. For more information, please visit the SAP Help Portal 5
 5/16/2021
other DBMS may
apply instead. In
cases such as this,
the limit that is met
rst becomes the
actual limit.

Number of columns in a row table 1,000 MAXIMUM_NUMBER_OF_COLUMNS_IN_ROW_TABLE

Number of columns in a view 64,000 MAXIMUM_NUMBER_OF_COLUMNS_IN_VIEW

Number of rows in each table Limited by storage

size RS: 1,945
GB/sizeof(row),

CS: 2^31 * number

of partitions

Length of a row Limited by RS

storage size (1,945
GB per index
server)

Size of a non-partitioned table Limited by RS

storage size (1,945
GB per index
server)

Number of partitions in a CS 16,000 MAXIMUM_NUMBER_OF_PARTITIONS_IN_CSTABLE

table

Number of triggers per table per 1,024 MAXIMUM_NUMBER_OF_TRIGGERS_PER_TABLE_PER_DML

DML statement

Number of records per (non- 2^31 (i.e.

partitioned) table 2,147,384,648, or
~2 billion)

Indexes and Constraints

Number of indexes for a table 1,023 MAXIMUM_NUMBER_OF_INDEXES_IN_TABLE

Number of primary key columns 16 MAXIMUM_NUMBER_OF_COLUMNS_IN_PRIMARY_KEY

in each table

Number of primary key columns 1,000 MAXIMUM_NUMBER_OF_COLUMNS_IN_PRIMARY_KEY_IN_COLUMN_TABLE

in each column store table

Number of columns in an index 16 MAXIMUM_NUMBER_OF_COLUMNS_IN_INDEX

Number of columns in a UNIQUE 16 MAXIMUM_NUMBER_OF_COLUMNS_IN_UNIQUE_CONSTRAINT

constraint

Size of sum of primary key, 16,384 Bytes MAXIMUM_SIZE_OF_KEY_IN_INDEX

index, UNIQUE constraint

Number of indexes in row store 256,000

SQL

Length of an SQL statement 2,147,483,648 MAXIMUM_LENGTH_OF_SQL_STATEMENT

Bytes

This is custom documentation. For more information, please visit the SAP Help Portal 6
 5/16/2021
Depth of SQL view nesting 128 MAXIMUM_DEPTH_OF_SQL_VIEW_NESTING

Maximum depth of SQL parse 0 MAXIMUM_DEPTH_OF_SQL_PARSE_TREE

tree
0 (unlimited)
This limitation does not show in
M_SYSTEM_LIMITS unless a
limit is con gured to something
other than 0 (no limit) using the
max_parse_tree_depth
parameter in indexerver.ini.

Maximum depth of joins in a 0 MAXIMUM_DEPTH_OF_JOINS

statement.

This limitation does not show in

M_SYSTEM_LIMITS unless a
limit is con gured to something
other than 0 (no limit) using the
max_join_depth parameter in
indexerver.ini.

Number of columns in an ORDER 65,535 MAXIMUM_NUMBER_OF_COLUMNS_IN_ORDER_BY

BY

Number of columns in a GROUP 65,535 MAXIMUM_NUMBER_OF_COLUMNS_IN_GROUP_BY

BY

Number of elements in IN 65,535 MAXIMUM_NUMBER_OF_COLUMNS_IN_IN_PREDICATE

predicates

Number of elements in SELECT 65,535 MAXIMUM_NUMBER_OF_OUTPUT_COLUMNS_IN_STATEMENT

clause

Number of tables in a statement. 0 MAXIMUM_NUMBER_OF_TABLES_IN_STATEMENT

This limitation does not show in

M_SYSTEM_LIMITS unless a
limit is con gured to something
other than 0 (no limit) using the
max_table_count_in_statement
parameter in indexerver.ini.

LOB Limitations

Maximum size of an in-memory 2 GB MAXIMUM_SIZE_OF_MEMORY_LOB_IN_COLUMN_STORE

LOB for a column store table

Maximum size of an in-memory 2 GB MAXIMUM_SIZE_OF_MEMORY_LOB_IN_ROW_STORE

LOB for a row store table

Maximum size of a packed LOB 1,013,760 bytes MAXIMUM_SIZE_OF_PACKED_LOB

Maximum size of a LOB on disk 4,294,967,295 MAXIMUM_SIZE_OF_DISK_LOB

bytes

Procedures

Size of all stored procedures 1,945 GB MAXIMUM_SIZE_OF_ALL_STORED_PROCEDURES

Size of a procedure de nition 2 GB MAXIMUM_SIZE_OF_PROCEDURE_DEFINITION

This is custom documentation. For more information, please visit the SAP Help Portal 7
 5/16/2021

Related Information
M_SYSTEM_LIMITS System View
SAP HDI Sizing and Limitations

Administration Tools
Several tools are used for the administration of SAP HANA in the cloud.

 Note
Some aspects of instance management are currently handled by SAP and may depend on your infrastructure provider. For
more information, see Service Requests in the SAP HANA Service for SAP BTP Getting Started Guide .

SAP BTP Cloud SAP HANA Service SAP HANA SAP HANA Database SAP HANA hdbsql
Click cockpit Foundry Dashboard Cockpit Explorer
the Command A command line tool
name The Line The tool for managing The SAP HANA An additional tool for available with the SAP
of eachadministration Interface (cf SAP HANA service database database HANA client
tool fortool of the SAP instances from the SAP administration administrators
CLI)
more BTP BTP cockpit tool available available as a service Use hdbsql to execute
inform A Cloud as a service from the SAP HANA SQL statements and
ation. Use the SAP Foundry tool Use the SAP HANA from the SAP cockpit service database procedures,
BTP cockpit to Service Dashboard, for HANA Service as well as query
provision SAP Use the cf CLI example, to see technicalDashboard Use the SAP HANA information about the
HANA service to create SAP information about a database explorer database and catalog
instances and HANA service service instance, stop Use the SAP service to query objects, from the
bind applications instances and and start the instance, HANA cockpit information about the command line.
in a Cloud bind and access the SAP service to database, as well as
Foundry space. applications in HANA cockpit. administer and view information about More information
a Cloud monitor the your database's
Foundry space.More information catalog objects.

This is custom documentation. For more information, please visit the SAP Help Portal 8
 5/16/2021
More More Open the SAP HANA SAP HANA SAP HANA HDBSQL
 Note
information information Service Dashboard database. (Command-Line
The SAP HANA
Reference)
database is
SAP BTP Cockpit Cloud Foundry
 Note registered in the
Command
The SAP SAP HANA
Creating an SAP Line Interface
HANA database explorer
HANA Service
database is when you provision
Instance Using the
registered in your instance.
Cloud Foundry
the SAP
CLI with the
HANA
SAP HANA More information
cockpit
Service
when you
Open the SAP HANA
provision
Using the Database Explorer
your
Cloud Foundry (SAP HANA Cockpit)
instance.
Command
Line Interface
(cf CLI) More
information

Access SAP
HANA Cockpit
(AWS and GCP
Regions)

Related Information
Service Requests

SAP HANA Cockpit

Use the Web-based administration tool SAP HANA cockpit for the administration and monitoring of SAP HANA databases in the
SAP BTP, Cloud Foundry environment.

What is the SAP HANA cockpit in SAP BTP?

As the SAP HANA administration tool, the SAP HANA cockpit supports both on-premise and cloud deployments of SAP HANA.
For SAP HANA databases provisioned through the SAP HANA Service for SAP BTP in the Cloud Foundry environment, the SAP
HANA cockpit service provides a single point of access to a range of tools for database-level administration and monitoring.

For the platform-level management of SAP HANA databases in the Cloud Foundry environment (such as creating new
databases), you must use the SAP BTP's administration tool: the SAP BTP cockpit. For more information about using the SAP
BTP cockpit to manage databases, refer to the relevant SAP HANA service documentation. See SAP HANA Service for SAP
BTP.

How do I access the SAP HANA cockpit in the Cloud Foundry environment?
You access the SAP HANA cockpit by navigating to the tenant database you want to administer in the SAP BTP cockpit. For
more information, see Access SAP HANA Cockpit .

What can I do with the SAP HANA cockpit?

This is custom documentation. For more information, please visit the SAP Help Portal 9
 5/16/2021
For the administration and monitoring of cloud deployments of SAP HANA, the SAP HANA cockpit provides database
administration features in the following areas.

Monitoring Con guration Analysis and Diagnosis Performance Security

Click Optimization
each Limit failures and ensure Increase productivity Prevent or minimize unplanned Provide safe
area acceptable levels of and maximize system downtime by analyzing trace Improve business access to
for performance by monitoring efficiency by properly and diagnosis les, as well as processes and end- applications
more alerts, resource usage, and con guring system querying system views using user experience by and protect
informa performance of your properties and alerts. SAP HANA database explorer analyzing resource business
tion. database. usage and workload information by:
More information More information using:
More information Provisio
Alert Con guration View Diagnostic Files in the Performance ning
users
Using the Database SAP HANA Database Explorer Monitor
using
Overview Page to Manage a Workload roles
Database Open Catalog Objects Analyzer
Monitori
SQL Analyzer ng
critical
settings
More information
Auditing
activity
Monitoring,
in the
Analyzing, and databas
Improving e
Performance Encrypti
ng data
Analyzing Workloads
More
Analyzing Statement information
Performance
Provisioning
Users in SAP
HANA Cockpit

Monitoring
Critical
Security

This is custom documentation. For more information, please visit the SAP Help Portal 10
 5/16/2021
Settings in SAP
HANA Cockpit

Auditing
Activity in the
SAP HANA
Database

Managing Data
Encryption in
SAP HANA

Access SAP HANA Cockpit (AWS and GCP Regions)

You access the SAP HANA cockpit for your SAP HANA database in the SAP BTP cockpit via the SAP HANA Service Dashboard.

Prerequisites
The Space Manager has added you as a member to the Cloud Foundry space in which the SAP HANA service is running
and has given you the Space Developer role.

For more information about adding space members, see Add Space Members Using the Cockpit.

 Note
If you have recently been added as a new member of a global account by the Space Manager, it may take a few days
before you can access the space.

A database user administrator has created a database user for you with the necessary roles and privileges for
performing the planned operations.

If this is the rst time you're opening the SAP HANA cockpit, you must log on as the SYSTEM user using the password you
entered when you created the instance. This user has privileges for all operations.

 Recommendation
Do not use the SYSTEM user for day-to-day activities. Instead, use this user to create dedicated database users for
administrative tasks and to assign privileges to these users. It is recommended that you then deactivate the SYSTEM
user. A user with system privilege USER ADMIN can deactivate SYSTEM with the statement ALTER USER SYSTEM
DEACTIVATE USER NOW.

For more information about creating database users and assigning the required roles and privileges, see the section on
managing users. For more information about required authorizations, see the section on authorizations needed for
monitoring and administration.

Procedure

 Note
The following procedure describes how to access SAP HANA databases provisioned with the latest version of the SAP HANA
service in the Cloud Foundry environment only. If you have databases in an AWS region and you can see the SAP HANA tab in
the navigation area of the SAP BTP cockpit, see Access SAP HANA Cockpit.

1. In the SAP BTP cockpit, navigate to the Cloud Foundry space that owns the database you'd like to access using the SAP
HANA cockpit.

This is custom documentation. For more information, please visit the SAP Help Portal 11
 5/16/2021
2. In the navigation area, choose Services Service Instances .

3. Select your SAP HANA service instance.

4. On the service instance page, choose  Open Dashboard in the Actions column.

The SAP HANA Service Dashboard opens.

5. On the SAP HANA Service Dashboard, choose Open SAP HANA Cockpit.

6. Enter the name and password of your database user, if required.

 Note
The rst time you log on, your user name and password are securely stored and automatically retrieved the next time
you log on. This means that if you want to log on to the database as a different user, you need to log off from the SAP
HANA cockpit and log on again.

Results
You are now logged on to the SAP HANA cockpit and connected to your SAP HANA database. Here, you have access to a range
of tools for database-level administration and monitoring. To view information about your database's catalog objects and
execute queries, open the SAP HANA database explorer, for example, by choosing Browse database objects or Open SQL
Console.

 Note
The rst time you want to access the database in the SAP HANA database explorer, you must do so via the SAP HANA
cockpit to ensure that your logon credentials are available in the secure store. After that, you can navigate directly to the
URL of the database explorer and you will be automatically able to access your resource.

Related Information
Add Space Members Using the Cockpit
Create a Database User
Assign Roles to Database Users
Assign Privileges to a User
Authorizations Needed for Monitoring and Administration
Navigate to Orgs and Spaces in the Cockpit

Authorizations Needed for Monitoring and Administration

To view information about the SAP HANA database and access the various applications for administration and monitoring, you
need to connect to the database with a database user with appropriate database privileges. If you don't have the required
privileges, speci c tiles, features, or actions aren't available to you.

 Note
To be able to connect to a database and see minimum monitoring information, the connecting database user must have
system privilege CATALOG READ and the SELECT privilege on the schema _SYS_STATISTICS.

Database Monitoring and Administration

These tables list the database privileges required to view information about an SAP HANA database on the Database Overview
page and to access monitoring and administration functions on subsequent pages.

Monitoring
This is custom documentation. For more information, please visit the SAP Help Portal 12
 5/16/2021

To Access... You Need These SAP HANA Privileges...

Services
CATALOG READ system privilege

SELECT privileges on:

SYS.m_services

SYS.m_service_memory

SYS.m_service_statistics

SYS.m_heap_memory_reset

_SYS_STATISTICS.STATISTICS_SCHEDULE

_SYS_STATISTICS.HELPER_ALERT_CHECK_INACTIVE_SERVICES_AGE

Alerts SELECT privileges on _SYS_STATISTICS

Memory Usage CATALOG READ system privilege

Memory Analysis
CATALOG READ system privilege

SELECT on _SYS_STATISTICS object privileges

CPU Usage CATALOG READ system privilege

Disk Usage CATALOG READ system privilege

Performance Monitor CATALOG READ system privilege

Monitor Statements To enable or disable memory tracking, you need the INIFILE ADMIN privilege.
To cancel the session, you need the SESSIONS ADMIN privilege.

Sessions To cancel sessions or operations, you need the SESSION ADMIN privilege.

Threads To cancel sessions or operations, you need the SESSION ADMIN privilege.

Monitor expensive statements To con gure expensive statements, you need the INIFILE ADMIN privilege.

Open SQL plan cache To con gure SQL plan cache, you need the INIFILE ADMIN privilege.

Open blocked transactions No additional authorization required

Smart Data Access No additional authorization required

Alerting and Diagnostics

To Access... You Need These SAP HANA Privileges...

Con gure alerts INSERT, EXECUTE, DELETE, and UPDATE privileges on

_SYS_STATISTICS

Plan trace
To turn plan trace on or off, you need the TRACE ADMIN
privilege.

To retrieve the results, you need the SELECT privilege on

SYS schema. The SYSTEM user or a user with the
SAP_INTERNAL_HANA_SUPPORT_ROLE has this
authorization.

Other Administration

This is custom documentation. For more information, please visit the SAP Help Portal 13
 5/16/2021

To Access... You Need These SAP HANA Privileges...

Apply con guration templates System privilege INIFILE ADMIN

System Information

To Access... You Need These SAP HANA Privileges...

System Information System privilege CATALOG READ and SELECT on

_SYS_STATISTICS

Help links No additional authorization required

Security

Security

To Access... You Need These SAP HANA Privileges...

Data Encryption
To enable/disable encryption: system privilege
ENCRYPTION ROOT KEY ADMIN

Auditing To see audit policies, the system privilege CATALOG READ or

AUDIT ADMIN.

To create, change, and delete audit policies, system privilege

AUDIT ADMIN.

To delete the audit log, AUDIT OPERATOR.

To change the auditing status, one of the following system

privileges:

AUDIT ADMIN

INIFILE ADMIN

To see the system views AUDIT_LOG, system privilege AUDIT

READ, AUDIT ADMIN, or AUDIT OPERATOR.

Authentication To see information about authentication, system privilege INIFILE

ADMIN.

To be able to see the password blacklist on opening the Password

Policy and Blacklist page, you need SELECT privilege on
_SYS_PASSWORD_BLACKLIST (_SYS_SECURITY).

User & Role Management

To Access... You Need These SAP HANA Privileges...

Manage users To view users, system privilege CATALOG READ.

To view, create, and manage users, system privilege USER ADMIN.

To change your own password, no privilege is required.

Assign roles to users To view roles, system privilege CATALOG READ.

To view and assign roles, system privilege ROLE ADMIN.

This is custom documentation. For more information, please visit the SAP Help Portal 14
 5/16/2021

To Access... You Need These SAP HANA Privileges...

Assign privileges to users To view all the privileges granted, system privilege CATALOG READ.

To assign privileges, the privileges must be granted with the

permission to grant them to other users.

Manage roles To view roles, system privilege CATALOG READ.

To create and manage roles, system privilege ROLE ADMIN and the
privileges required to grant speci c privileges to roles.

To grant object privileges on your own objects to a role, no privilege

is required.

Manage user groups To create and modify user groups, system privilege USER ADMIN.
To modify an existing user group con gured for exclusive
administration, the object privilege USERGROUP OPERATOR on the
user group.

Security-Related Links

To Access... You Need These SAP HANA Privileges...

Manage certi cates To read and change certi cates, CERTIFICATE ADMIN.

To read certi cates, CATALOG READ or TRUST ADMIN.

Manage certi cate collections To see certi cate collections, CATALOG READ.

To create certi cate collections and assign certi cates, TRUST

ADMIN.

To see, change, or delete a certi cate collection, you must:

Have the system privilege DATABASE ADMIN and the

object privilege REFERENCES, DROP, or ALTER on a
certi cate collection.

Be the owner of the certi cate collection and have one of

the following system privileges:

SSL ADMIN

USER ADMIN

CERTIFICATE ADMIN

Network security information System privilege CATALOG READ

View anonymization report System privilege CATALOG READ

Manage SAML identity providers System privilege USER ADMIN

Manage JWT identity providers System privilege USER ADMIN

Security administration help No additional authorization required

SAP HANA security website No additional authorization required

Security checklists No additional authorization required

Backup and Recovery (SAP HANA Cockpit)

Authorizations for Backup and Recovery (SAP HANA Cockpit)

This is custom documentation. For more information, please visit the SAP Help Portal 15
 5/16/2021

To Perform This You Need These SAP HANA Privileges...

Task...

System Database Tenant Database Tenant Database

(Through the System Database)

View, create, and BACKUP ADMIN or BACKUP BACKUP ADMIN or BACKUP DATABASE BACKUP OPERATOR or
cancel database OPERATOR (recommended for batch OPERATOR (recommended for batch
backups DATABASE BACKUP ADMIN or
users only) users only)
DATABASE ADMIN

Delete database BACKUP ADMIN BACKUP ADMIN DATABASE BACKUP ADMIN or

backups and
DATABASE ADMIN
backups of the
backup catalog

Recover or copy Operating system user <sid>adm (not possible) DATABASE RECOVERY OPERATOR
a database or

DATABASE ADMIN

Schedule BACKUP ADMIN BACKUP ADMIN DATABASE BACKUP OPERATOR or

backups
SELECT, UPDATE, and DELETE SELECT, UPDATE, and DELETE DATABASE BACKUP ADMIN or
privileges for the following tables: privileges for the following tables:
DATABASE ADMIN and SELECT,
_SYS_XS.JOB_SCHEDULES _SYS_XS.JOB_SCHEDULES UPDATE, and DELETE privileges for
the following tables:
_SYS_XS.JOBS _SYS_XS.JOBS
_SYS_XS.JOB_SCHEDULES

_SYS_XS.JOBS

Con gure To display the backup con guration DATABASE BACKUP ADMIN DATABASE BACKUP ADMIN
backups settings, BACKUP ADMIN.
To display the backup con guration
To con gure backup retention, you settings, BACKUP ADMIN.
also need:
To con gure backup retention, you
SELECT, UPDATE, and also need:
DELETE privileges for table
SELECT, UPDATE, and
_SYS_XS.JOB_SCHEDULES
DELETE privileges for table
SELECT privileges for _SYS_XS.JOB_SCHEDULES
table _SYS_XS.JOBS
SELECT privileges for table
_SYS_XS.JOBS

System-wide Backup Con guration

To change default con guration settings for all the tenant databases, you need DATABASE ADMIN.

For more information, see Authorizations Needed for Backup and Recovery in the SAP HANA Database Backup and Recovery
section of the SAP HANA Administration Guide .

Performance Management

Workload Management

To Access... You Need These SAP HANA Privileges...

This is custom documentation. For more information, please visit the SAP Help Portal 16
 5/16/2021

To Access... You Need These SAP HANA Privileges...

Analyze Workload (Based on Thread Samples) System privileges CATALOG READ and INIFILE ADMIN.

Related Information
Authorizations Needed for Backup and Recovery

Open the SAP HANA Database Explorer (SAP HANA Cockpit)

Open the SAP HANA database explorer to view information about your database's catalog objects and execute queries.

Prerequisites
You must be a user of the SAP HANA cockpit.

Context
The database explorer displays your database objects, grouped by schema. It also contains an SQL console for executing SQL
statements and an SQL analyzer for analyzing them, an SQL debugger for debugging procedures, as well as an MDX console for
executing MDX queries.

Procedure
1. In the SAP HANA cockpit, navigate to the Overview page of a database that you want to explore, and then click the
Browse Database link on that page.

The database explorer opens and the catalog browser lists your database in its tree.

You can add other databases by clicking Add a database to the Database Explorer () at the top of the catalog browser.

2. From the catalog browser, choose your database to view the object types available, and then choose an object type to
view its individual objects.

3. Choose an object to view the object's de nition in the right pane, or right-click the object to choose a different action.

Related Information
Add a Database to the SAP HANA Database Explorer
Execute SQL Statements
Execute MDX Queries in the SAP HANA Database Explorer

Execute SQL Statements

Execute SQL statements and analyze their results by using the SQL console that is included with the SAP HANA database
explorer.

Prerequisites
You must have the required privileges in the SAP HANA database to execute your SQL statements.

Context
Be default, DML contents are autocommited and syntax errors are indicated.

This is custom documentation. For more information, please visit the SAP Help Portal 17
 5/16/2021
To view keyboard shortcuts, right-click anywhere in the SQL console and then click Keyboard Shortcuts from the context menu.

Procedure
1. Open an SQL console from the database explorer by right-clicking your database and clicking Open SQL Console.

2. Specify a SQL statement.

For example, the following statement returns users who have the EXPORT or IMPORT system privilege:

SELECT * FROM EFFECTIVE_PRIVILEGE_GRANTEES WHERE (OBJECT_TYPE = 'SYSTEMPRIVILEGE')

AND (PRIVILEGE = 'EXPORT' OR PRIVILEGE='IMPORT');

You can also import SQL directly into the console by clicking the Import File icon ( ) and choosing a local le.

3. Execute on or more statements by choosing one of the following options:

Option Action

Execute all statements Click the Run icon () from the global toolbar or press F8.

Execute individual statements Highlight the statement, and then click the Run icon () from the
global toolbar or press F8.

Execute a SQL query on multiple databases Open a SQL console, create your query and then click Run Run
on Multiple Databases . Click the databases, groups, or
resources where you want to run the query. The query runs as a
background activity. Optionally, click Cancel all queries on
SQL error, to stop subsequent queries from running on all
databases if one of your queries encounters a SQL error. Click
Run SQL.

Execute a query and open the SQL analyzer to view Open the Run dropdown list from the global toolbar, and then
information about the query's plan choose Analyze SQL.

A new tab opens to display the query plan for your statement in
the SQL analyzer.

To save the plan, click Analyze SQL and Save Plan and specify
a lename for the plan. You can also specify whether to run the
analysis as a background activity.

Execute the content of the current line Open the Run dropdown list from the global toolbar, and then
choose Run Line.

Prompt for the values of parameters before executing the Open the Run dropdown list from the global toolbar, and then
statement choose Prepare Statement.

Results
The Result pane appears with the results. Multiple Result tabs appear when there is more than one result set. By default, only
the rst 1000 rows in a result set are retrieved.

Related Information
Introduction to SQL
SAP HANA SQL Reference
About SAP HANA SQLScript
Analyzing Statement Performance

This is custom documentation. For more information, please visit the SAP Help Portal 18
 5/16/2021
Setting User Preferences
Use the Statement Library to Administer Your Database

Open Catalog Objects

Browse your database's catalog using the SAP HANA database explorer.

Prerequisites
You must be a user of the database that you want to explore and you must have the required privileges to view the catalog
items.

Context
Some monitoring and problem analysis may require you to examine individual tables and views, for example, system views
provided by the SAP HANA database. Use the catalog browser, which is located in the left pane, to nd and open these catalog
objects.

Procedure
1. In the catalog browser, choose the database that you want to explore.

If your database is not listed in the catalog browser, then click Add a database to the Database Explorer () to add the
database.

The catalog browser lists the catalog objects, grouped by schema.

2. Choose an object type to view its objects.

For example, choose Tables to list the tables in the database.

3. Choose an object to view its de nition in an editor in the right pane, or right-click the object to choose a different action.

For example, right-click a table and choose Open Data to view the table's data.

Related Information
Add a Database to the SAP HANA Database Explorer
Add HDI Containers and Databases to the SAP HANA Database Explorer
View Database Procedures in the SAP HANA Database Explorer

Create URL Shortcuts to Database Objects in the SAP HANA Database Explorer

Use the SAP HANA database explorer to create a URL shortcut, and then use it to create a bookmark or favorite in your
browser.

Procedure
1. In the catalog browser, right-click a database object and choose Create Shortcut.

2. Click Copy URL to copy the shortcut to your clipboard.

3. Paste the URL into your browser.

4. Use your browser to create a bookmark or favorite for the copied URL.

Results

This is custom documentation. For more information, please visit the SAP Help Portal 19
 5/16/2021
The shortcut is created. Use it to open the database explorer and quickly navigate to the database object.

Related Information
Search for Database Objects in the SAP HANA Database Explorer

Search for Database Objects in the SAP HANA Database Explorer

Search for database objects across all databases that the SAP HANA database explorer is connected to.

Prerequisites
In the database explorer, connect to each database that you want to search.

Context
Use the catalog browser to nd your object when you know the type of object and the database that it exists in.

If you are unsure of the object type or the database that it exists in, then use the database object search. This search looks for
matches in either a speci ed database or all of the connected databases in the database explorer and it can search across
more than one object type. For example, use this search to nd all tables and procedures that contain the word production in
their names.

Procedure

From the right sidebar of the database explorer, click Object Search ().

a. Specify a search term that is longer than one character.

Specify * to return all results.

b. Optionally, restrict your search to a speci c database.

c. Target your search to speci c object types by selecting them at the bottom of the pane.

Results
The search results appear in the Search for Database Objects pane.

Related Information
Create URL Shortcuts to Database Objects in the SAP HANA Database Explorer
Open Catalog Objects

This is custom documentation. For more information, please visit the SAP Help Portal 20