Managing secure data access and configuring systems securely are critical tasks in operating business systems today. SAP HANA has security built into its core, with a comprehensive framework and tooling for authentication and single sign-on, authorization and role management, user and identity management, audit logging, secure configuration and encryption.
Showing posts with label hana-security. Show all posts
Showing posts with label hana-security. Show all posts
Friday, 28 July 2017
Thursday, 18 May 2017
SAP HANA Security: Granting Object Privileges with Repository Roles
This blog explains how to use the SAP HANA Web-Based Development Workbench to grant object privileges with repository roles in SAP HANA.
SAP HANA Web-Based Development Workbench
The SAP HANA Web-Based Development Workbench editor, hosted within the XS engine, provides an interface that you can use to build and test development artifacts. From a security perspective, we can use this interface to create and manage repository-based roles. This interface offers all the advantages of repository-based roles without the need to define those roles using scripts. The interface is not exclusive, meaning that you can edit repository-based roles created using scripts with the GUI interface, and you can edit a repository-based role’s scripts, those created using a GUI, in SAP HANA Studio. This flexibility allows the security administrator to manage the repository role using either interface.
SAP HANA Web-Based Development Workbench
The SAP HANA Web-Based Development Workbench editor, hosted within the XS engine, provides an interface that you can use to build and test development artifacts. From a security perspective, we can use this interface to create and manage repository-based roles. This interface offers all the advantages of repository-based roles without the need to define those roles using scripts. The interface is not exclusive, meaning that you can edit repository-based roles created using scripts with the GUI interface, and you can edit a repository-based role’s scripts, those created using a GUI, in SAP HANA Studio. This flexibility allows the security administrator to manage the repository role using either interface.
Monday, 6 March 2017
Data Encryption Comparison between HANA 1.0 and HANA 2.0
Recently, I was dealing with the challenge whether I should implement server-side data encryption (with focus on data and logs) on our SAP HANA 1.0 SPS 12 system or I should wait with the implementation until the upgrade to latest release of SAP HANA, which is currently HANA 2.0 SPS 00.
For this purpose, I was analyzing the question what is possible to implement in SAP HANA 1.0 and HANA 2.0, regarded from a data and log encryption perspective. As many others might be exploring this, I wanted to share my findings with you.
For this purpose, I was analyzing the question what is possible to implement in SAP HANA 1.0 and HANA 2.0, regarded from a data and log encryption perspective. As many others might be exploring this, I wanted to share my findings with you.
Saturday, 5 November 2016
Secure your HANA Cloud Connector with OpenSSL certificates – Part 3
In parts 1 and 2 of this blog series, I showed how to secure your SCC with a trusted UI Certificate as well as how to further secure your SCC with a trusted System Certificate, put your CA certificate in the Trust Store, install a SCC CA Certificate and with that enable Principal Propagation. As a result, we got 4 green boxes in the SCC General Security Status:
Friday, 11 March 2016
Demystifying SAP HANA Administration
Since its release, SAP HANA represented a radical change in the direction of SAP's product architecture. As an SAP Instructor, I’ve been wondering how easy it would be to manage the new SAP HANA platform. Can I use platform and administration tools that are currently in place? Or, do I need to learn a new set of gadgets?
After reading through some of the documentation available in SAP Learning Hub, and reviewing SAP courses such as SAP HANA Introduction (HA100), SAP HANA - Operations & Administration (HA200), and SAP HANA Implementation and Modeling (HA300), I realized that the learning curve is quite easy – if you get some guidance up-front. That’s why I’m here! This blog will demystify SAP HANA administration by listing tools you can use to handle periodic administrative tasks, and by explaining the key capabilities of each and when to use them.
After reading through some of the documentation available in SAP Learning Hub, and reviewing SAP courses such as SAP HANA Introduction (HA100), SAP HANA - Operations & Administration (HA200), and SAP HANA Implementation and Modeling (HA300), I realized that the learning curve is quite easy – if you get some guidance up-front. That’s why I’m here! This blog will demystify SAP HANA administration by listing tools you can use to handle periodic administrative tasks, and by explaining the key capabilities of each and when to use them.
Subscribe to:
Posts (Atom)