HANA LIVE comes with Security Add On tool call вЂњAnalytics Authorization Assistant ToolвЂќ (AAA tool or Authorization tool).This tool is very handy to define security on HANA Live Content. It contains more than 1000 prebuilt models/views and building security around them is a bit challenge. HANA Live content is build on direct transactional database tables (in Integrated approach or in Side Car approach). There are two aspects to implementing security using Analytical Authorization Assistant tool.Д«.) Usage of AAA tool A.) Installtion Of AAA Tool To mitigate this issue, Analytical Authorization Assistant (AAA) tool is provided to implement SAP ECC security on the HANA Live views. The HANA LIVES views consume core SAP ECC tables, and therefore doesnвЂ™t inherit SAP ECC security. The SAP ECC does not define security at the database table level therefore there are no restrictions when querying these core tables directly. In SAP ECC, security is very tightly defined at the application layer. The underline Non-Query views do not have any security restrictions. These Query Views are built on underlying views known as Non-Query views or direct tables. The Query Views are the only views exposed to users for reporting and analytic purposes. The data restrictions are applied at the top level models or views also known as Query Views. Hana Live security model follows a top-down security approach. I have written a blog providing HANA Live overview which is available here HANA LIVE Blog. Г The HANA Repository is owned by user _SYS_REPO.

The A rchitect/SYSTEM/Administrators has to login as each schema owner and grant permissions to target users/roles. Г Database schema OWNER is the only user who can grant access to other users, including SYSTEM user. Г A single вЂњPOWER USERвЂќ who has access to everything does not exist. Following are basic security concepts that simplify understanding and implementation of HANA Security. The perception that HANA Security is complex is not correct.SAP HANA has basic building block to design and implement security. Attribute Views ,Analytical Views and Calc views. Information Modelers will be implementing authorization by creating Analytical Privileges or Dynamic Analytical privileges, defined on top of SAP HANA package content i.e. This is usually done by DBAs or Delegated administrators or BASIS teams and this is off the topic for this blog.ДЄuthorization is the process used to verify that a User has been granted sufficient privileges to perform the requested action on the specified object (on Packages/Models or Views). Security in HANA can be categorized into following two categories.ДЄuthentication is the process used to verify the identity of a User who tries to access the system. It is important to protect data and at the same time it follows all the security compliance in SAP вЂ“ HANA. It prevents unauthorized use of the information in an enterprise. Information Security is a key aspect of any organization.

Sap ecc security