What is Analytic Privileges?
Analytic privileges control access to SAP HANA data models.
Analytic privileges are used to grant different users access to different portions of data in the same view depending on their business role. It allows us to maintain row-level access.
Why do we need Analytic Privilege?
SQL privileges implement authorization at object level only. Users either have access to an object, such as a table, view or procedure, or they do not.
While this is often sufficient, there are cases when access to data in an object depends on certain values or combinations of values. Analytic privileges are used in the SAP HANA database to provide such fine-grained control of which data individual users can see within the same view.
Example:
Analytic privileges control access to SAP HANA data models.
Analytic privileges are used to grant different users access to different portions of data in the same view depending on their business role. It allows us to maintain row-level access.
Why do we need Analytic Privilege?
SQL privileges implement authorization at object level only. Users either have access to an object, such as a table, view or procedure, or they do not.
While this is often sufficient, there are cases when access to data in an object depends on certain values or combinations of values. Analytic privileges are used in the SAP HANA database to provide such fine-grained control of which data individual users can see within the same view.
Example:
Suppose there is a calculation view which contains the sales data of all the regions like Asia, Europe and America.
The regional managers must have access to the calculation view to see the data. However, managers should only see the data for their region. The manager of America region should not be able to see data of other region.
In this case, an analytic privilege could be modeled so that they can all query the view, but only the data that each user is authorized to see is returned.
Important Facts about Analytic Privileges:
- Analytic privileges are intended to control read-only access to SAP HANA information models, that is
- Attribute views
- Analytic views
- Calculation views
- Analytic privileges do not apply to database tables or views modeled on row-store tables.
No comments:
Post a Comment