Grant Read Only Access to a user in HANA Database

[manojsomkuwar]

Hi Team,

We have a requirement of assigning only "READ" access to a certain user in HANA Database for checking all tables.

Please note that we cannot assign any administrative privileges to this user. Our HANA DB version is 2.00.057.00.1629894416.

Kindly let us know which roles/authorization we can assign to this DB user so that they can only have read access in the database.

Regards,

Manoj Somkuwar

[dvankempen]

Hi Manoj,

To grant a user read access, you need to grant the user SELECT privileges to the database objects you want the user to have read access to. The UPDATE, INSERT, and DELETE privileges would allow the user to make changes.

Not that only the object owner can grant access to an object, not a database administration account like SYSTEM.

For the concepts, see

• Object Privileges | SAP HANA Security Guide for SAP HANA Platform

The MONITORING role allows full read-only access to all metadata, the current system status in system and monitoring views, and the data collected by the statistics server.

The PUBLIC role contains privileges for filtered read-only access to the system views. Only objects for which the users have access rights are visible. By default, this role is granted to every user, except restricted users.

As documented,

• Predefined Database (Catalog) Roles | SAP HANA Security Guide for SAP HANA Platform

Answer's your question?

[BitanC]

Hi Manoj,

You may take a look into predefined role : MONITORING if that helps your purpose.

Thanks,

Bitan