SAP HANA Security: Granting Object Privileges with Repository Roles

This blog explains how to use the SAP HANA Web-Based Development Workbench to grant object privileges with repository roles in SAP HANA.

SAP HANA Web-Based Development Workbench

The SAP HANA Web-Based Development Workbench editor, hosted within the XS engine, provides an interface that you can use to build and test development artifacts. From a security perspective, we can use this interface to create and manage repository-based roles. This interface offers all the advantages of repository-based roles without the need to define those roles using scripts. The interface is not exclusive, meaning that you can edit repository-based roles created using scripts with the GUI interface, and you can edit a repository-based role’s scripts, those created using a GUI, in SAP HANA Studio. This flexibility allows the security administrator to manage the repository role using either interface.

Multi-container database mode is the new default

Multi-tenancy features, also known as “multiple database containers” or MDC have been available in SAP HANA for several years already. With the new SAP HANA 2.0 SPS 01 release, all systems now run in multi-container database mode. All new systems are installed in multi-container database mode, and existing single-container systems are converted during the upgrade to SAP HANA 2.0 SPS 01.

Advantages of multi-container database mode

Systems running in multi-container database mode can very easily be extended by adding new tenant databases. Being able to run and manage multiple tenant databases in one system helps you to lower capital expenditure, simplify database management, or for example build multi-tenant cloud applications.