Problem with SecurityAdmin role after SPS 11 upgrade

[Former Member]

Dear Colleagues,

After SPS 11 upgrade, I realized that the system role "sap.hana.xs.ide.roles::SecurityAdmin" has been turned into a blank role. It no longer contains SYSTEM and OBJECT PRIVILEGES. Now it is an almost empty role.

Please, anyone could tell why this is happening and how it can be solved to be a functional role again?

Before the upgrade, it worked OK and it has SYSTEM and OBJECT PRIVILEGES.

Thanks a lot!

Kevin Olesker

Argentina

[pfefferf · Accepted solution]

Hello Kevin,

the role should work as before, because role "sap.hana.ide.roles:SecurityAdmin" (without "xs" in the name) is granted to the role. Due to a reorganization already with SPS09 the new role was introduced and the old role was adjusted.

Regards,

Florian

[Former Member · Accepted solution]

Hello Florian,

I'm sorry I mispelled the most important part of the post: the role.

The role that I'm talking about is "sap.hana.ide.roles:SecurityAdmin", that is empty and I can see it in their file:

The upgrade was from SPS 09 to SPS 11.

Thank you

[pfefferf · Accepted solution]

The version you showed is the "offical" version in SPS11.

What do you miss?

Of course just give you access to the web-based "Security Application", but by default it does not allow to grant/revoke privileges.

For the specific privileges you can check Prerequisites for Granting and Revoking Privileges and Roles - SAP HANA Administration Guide. The list gives you an overview what privileges your user must have to do what he should do. I think that list should you enable to create a corresponding role with the prerequisite privileges which can be assigned to your user(s).

Regards,

Florian